<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2026:39332</id>
    <title>None: kernel bug fix and enhancement update</title>
    <issued date="2026-07-14 00:00:00"/>
    <updated date="2026-07-25 00:20:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>kernel bug fix and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Bug Fix(es) and Enhancement(s):  

  * XFS data corruption using reflink [almalinux-9.8.z] (JIRA:AlmaLinux-193937)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHBA-2026:39332" id="RHBA-2026:39332" type="rhsa" title="RHBA-2026:39332"/>
      <reference href="https://errata.almalinux.org/9/ALBA-2026-39332.html" id="ALBA-2026:39332" type="self" title="ALBA-2026:39332"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="687.26.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.26.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.26.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">9d40c6cfbf4ad38c4731f9dcd24624e491cd19944789431f539b18039176574c</sum>
        </package>
        <package name="libperf" version="5.14.0" release="687.26.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.26.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.26.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">c555a402e934a13ff8837cad93e3d0fe38d065cd3bdbee7919f5e1876105ac2c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5249</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for kernel-cross-headers is now available for AlmaLinux 9.</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012)
* kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729)
* kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-1966)
* kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* make SHA512_arch algos and CRYPTO_USER built-ins (BZ#2072643)
* SR-IOV performance &gt; 50% degradation (BZ#2074830)
* fix data corruption caused by dm-integrity (BZ#2082187)
* SCTP client-side peeloff issues [almalinux-9] (BZ#2084044)
* TCP connection fails in a asymmetric routing situation (BZ#2085480)
* Fails to boot Multiple RT VMs each with multiple vCPUs (BZ#2086963)
* spec: Fix separate tools build (BZ#2090852)
* call traces related to eeh_pseries observed and vmcore is not captured, when kdump is triggered (BZ#2092255)
* Mark ThunderX NIC driver as unmaintained (BZ#2092638)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5249" id="RHSA-2022:5249" type="rhsa" title="RHSA-2022:5249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1012" id="CVE-2022-1012" type="cve" title="CVE-2022-1012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1729" id="CVE-2022-1729" type="cve" title="CVE-2022-1729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1966" id="CVE-2022-1966" type="cve" title="CVE-2022-1966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27666" id="CVE-2022-27666" type="cve" title="CVE-2022-27666"/>
      <reference href="https://bugzilla.redhat.com/2061633" id="2061633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064604" id="2064604" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2086753" id="2086753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092427" id="2092427" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5249.html" id="ALSA-2022:5249" type="self" title="ALSA-2022:5249"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="kernel-headers" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-headers-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">1c8f71752eec52043fa93d04aaff6076261ca9fd2679c3d94714c0c834a464cc</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-extra-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">1ec4ede320d001664c8588badd6afd423a2acd329cc6e64f07af99cd7ec48090</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">21bf850a94070a9756bf1f981871a72c6b68f3d86bd38134cb022dd5120a2796</sum>
        </package>
        <package name="bpftool" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>bpftool-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">244ac2d837d13480740573f17f2eaaf456869d3a0840552e6e6920901734bf68</sum>
        </package>
        <package name="kernel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">314d778b6be5d713ae41d4f58cb4a64ad0c7cc2854670ec8e68cacd91e49b181</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-modules-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">3ca98aa034f59f852971c2702560ed1388efdbdf398a6670db7c20da7e92e9b8</sum>
        </package>
        <package name="kernel-modules-extra" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-modules-extra-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">558dde9fc36d95194d371d5c27fc794583d3de90dce8a2cf4d2304a6f7506149</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">5d5f0c5bff8b736157a4a24572b0162cee9707477c21852b9d9df03b3879e22c</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-devel-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">6334b0646f96c354c423698f8329fab0079df4edbd6a5aa3467964d8d1567002</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">658549321f30ace030c5c72fe90e6cbdd5bf2551a2b55daed5bff216f0c7c159</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-core-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">65d553578602c4e9fc437fa6a4e3b1c4076a0ced949f789caa74ebe4c17d3e6d</sum>
        </package>
        <package name="kernel-abi-stablelists" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-70.17.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">6c1459fb8b333303c7d981e116ccc0720c4f02c49ad9b933a93cdd2a4dc0f103</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">7c54210e0be71079246cd34b46627014d9522645b6bb2a4486a0d02f1fe865ae</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-doc-5.14.0-70.17.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">809a6a2193762c20c65675927231f196c18a5b97e6832f1fe1714467a5b785ca</sum>
        </package>
        <package name="kernel-debug" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">8aa147e5ec9235aee462c8b5bcb6e2c6454a160c2d57114be4cd021bbdecf9c7</sum>
        </package>
        <package name="kernel-modules" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-modules-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">8b954b3ab01b4bf0f424b3ed01b81a0fd64a015a0dec0a1bb5ab863d2d3de4c0</sum>
        </package>
        <package name="kernel-core" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-core-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">93315084094f716e88d54b94209d535d4eeee881a1ce1384a37f90b1d16a1c0a</sum>
        </package>
        <package name="kernel-debug-modules" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">aaf3bfd0e4346e57416fa6f724b1b8d619b8b08b08c13b14e9d2039a3f0a9b2a</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>python3-perf-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ab0fa74098a5514fb46ca338eb7bc274fddd7e10ce2361c96092ef330e126913</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-devel-matched-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">cefa7a0c97b2176f753be90c54c736e34c6f7a5c5671f8f1b5b817c08decadbd</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-cross-headers-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">e51de7eefdd482ee1828547e50c2c017b4b6433291162bd6a169cb0914ca6faa</sum>
        </package>
        <package name="perf" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>perf-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">eec19c4e3c60b5a285cd1fee662fe86685c711c0c79be9f9d9508595a1cc5b81</sum>
        </package>
        <package name="kernel-debug-core" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-core-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">f05d2a35aa7b3e12978a03fde79baf265bce773440705f5f3eba09e71ee878a1</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">f11f05b73093541bda0044829365bae37a37b3114bacc6daa1fd58b90f74dddb</sum>
        </package>
        <package name="kernel-tools" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-tools-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">fd39899f2b2afa6d0ac39d08490ef8d3df92182231efb62d02e367640a6fea0e</sum>
        </package>
        <package name="kernel-zfcpdump" version="5.14.0" release="70.17.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.17.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-5.14.0-70.17.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">fe84a39abf81c37637e91cecbec7dfe33ab9868d1cb12434f0bc2844731427f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5252</id>
    <title>Moderate: libarchive security update</title>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2022-07-21 17:29:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libarchive-devel is now available for AlmaLinux 9.</summary>
    <description>The libarchive programming library can create and read several different
streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images.
Libarchive is used notably in the bsdtar utility, scripting language bindings
such as python-libarchive, and several popular desktop file managers.
Security Fix(es):
* libarchive: an out-of-bounds read via the component zipx_lzma_alone_init
(CVE-2022-26280)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5252" id="RHSA-2022:5252" type="rhsa" title="RHSA-2022:5252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26280" id="CVE-2022-26280" type="cve" title="CVE-2022-26280"/>
      <reference href="https://bugzilla.redhat.com/2071931" id="2071931" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5252.html" id="ALSA-2022:5252" type="self" title="ALSA-2022:5252"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="libarchive" version="3.5.3" release="2.el9_0" epoch="0" arch="s390x" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>libarchive-3.5.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">9d9a21f53de7ffbe1585ec4f93c5fe2b29e32232fa87d0919796e4ff9b28b6a7</sum>
        </package>
        <package name="bsdtar" version="3.5.3" release="2.el9_0" epoch="0" arch="s390x" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>bsdtar-3.5.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">a91013540de7ae254a64677c1040c97435f3aa4858a049101e762cb4944777bf</sum>
        </package>
        <package name="libarchive-devel" version="3.5.3" release="2.el9_0" epoch="0" arch="s390x" src="libarchive-3.5.3-2.el9_0.src.rpm">
          <filename>libarchive-devel-3.5.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">cf08e05da34f5fe074325ed87c077de2deb35197eb5ac2a158788053b1a07afe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5257</id>
    <title>Moderate: libinput security update</title>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-07-21 17:40:32"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libinput-devel is now available for AlmaLinux 9.</summary>
    <description>libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.
Security Fix(es):
* libinput: format string vulnerability may lead to privilege escalation (CVE-2022-1215)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5257" id="RHSA-2022:5257" type="rhsa" title="RHSA-2022:5257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1215" id="CVE-2022-1215" type="cve" title="CVE-2022-1215"/>
      <reference href="https://bugzilla.redhat.com/2074952" id="2074952" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5257.html" id="ALSA-2022:5257" type="self" title="ALSA-2022:5257"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="libinput-utils" version="1.19.3" release="2.el9_0" epoch="0" arch="s390x" src="libinput-1.19.3-2.el9_0.src.rpm">
          <filename>libinput-utils-1.19.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">4560a3a6f9ca2e4d69c3ce9561c995289d9a49b22750997c81015a85befbf27d</sum>
        </package>
        <package name="libinput-devel" version="1.19.3" release="2.el9_0" epoch="0" arch="s390x" src="libinput-1.19.3-2.el9_0.src.rpm">
          <filename>libinput-devel-1.19.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">6f100677750e4ecd29d96fe5b9170fb472dd8fd1ee77b08026a6755a2a631ea5</sum>
        </package>
        <package name="libinput" version="1.19.3" release="2.el9_0" epoch="0" arch="s390x" src="libinput-1.19.3-2.el9_0.src.rpm">
          <filename>libinput-1.19.3-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">a28458e552b4ce640eb13c9d505b54de8f347cdec5b781427db7c08603425539</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5695</id>
    <title>Important: java-11-openjdk security, bug fix, and enhancement update</title>
    <issued date="2022-07-25 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for java-11-openjdk-demo-slowdebug is now available for AlmaLinux 9.</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.
The following packages have been upgraded to a later upstream version: java-11-openjdk (11.0.16.0.8). (BZ#2084777)
Security Fix(es):
* OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169)
* OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540)
* OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() [almalinux-9, openjdk-11] (BZ#2099915)
* SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode [almalinux-9, openjdk-11] (BZ#2107866)
* Revert to disabling system security properties and FIPS mode support together [almalinux-9, openjdk-11] (BZ#2107868)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5695" id="RHSA-2022:5695" type="rhsa" title="RHSA-2022:5695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21540" id="CVE-2022-21540" type="cve" title="CVE-2022-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21541" id="CVE-2022-21541" type="cve" title="CVE-2022-21541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34169" id="CVE-2022-34169" type="cve" title="CVE-2022-34169"/>
      <reference href="https://bugzilla.redhat.com/2108540" id="2108540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108543" id="2108543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108554" id="2108554" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5695.html" id="ALSA-2022:5695" type="self" title="ALSA-2022:5695"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="java-11-openjdk" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">2100fb0b0c65db8d9d84b03d4f2c7989a9ca18c126be06a1b11a83cfa7e36488</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">2e0b0fb62c9287f3876a393afb7fae722daedf1d06535eb8fb1129512b2fb123</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">30d6e0be63968c22f1340152fa60d4f9e25a9bb8b63df9c11a9051ee20bfade3</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">384c8917d813c69fb0c2b90f57c3f20ee2e74842ba08fa3dc086156b367cf03c</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">448b9c34d7fb4bef0d11cdb013c2c7031887a1ff947979ec0aac227bd3140d5b</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">5488e365ed8e636eb0d266825dbc2e4a113349d3e15052b55594005c59ecf13f</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">5c484910d3c26532111dfbf37da5572ddde1ce20de1c89dc619bbf4f5eb588b9</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">624d7dd68d3358bbf16362575941d8a0c29ece83e27e8e7cdf19d4a93bdcec6c</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">823f3c1319841869e735533ae5330c54d2f700d017bdb880a4c639211b586558</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">87a06c2355a91726b0a58519132e2643291885c2dd07884b467c1107c8f75155</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">93822026212ec5999f27829e7c8aa1fe52a50b935c717b649930f1a23f83f3c7</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ab768747d3ef855a62cd12c77420b86c5960baec93e5e2b7aa2ae9bee6f6bea6</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">cd6273eeffd83d107e86f6a6108a731b85d21021136b038a032b82c0c0812eab</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">cdb6b8354d443f46f625f7a9fb3695272aa5539d2efe1621ac4df1c6f0af8aa9</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">df5c4e62cb0f9e96d5303e0a779d687b46bdbecf84317c83af3a2537da02bc2a</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.16.0.8" release="1.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.16.0.8-1.el9_0.src.rpm">
          <filename>java-11-openjdk-src-11.0.16.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">f0808c76eb4d6cc7f231b0354cd8a4c16deefd627aaea81a57a4d5dd207fa146</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5736</id>
    <title>Important: java-17-openjdk security, bug fix, and enhancement update</title>
    <issued date="2022-07-27 00:00:00"/>
    <updated date="2022-08-05 17:18:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security, bug fix, and enhancement update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.
The following packages have been upgraded to a later upstream version: java-17-openjdk (17.0.4.0.8). (BZ#2084779)
Security Fix(es):
* OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169)
* OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540)
* OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541)
* OpenJDK: random exponentials issue (Libraries, 8283875) (CVE-2022-21549)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Previous AlmaLinux builds of OpenJDK 17 altered the arguments passed to sun.security.pkcs11.wrapper.PKCS11.getInstance() in order to facilitate FIPS support. This build adds an additional form of the method, retaining the original arguments, so that applications which depend on this internal method continue to function with AlmaLinux builds of OpenJDK. (BZ#2099919)
* With previous AlmaLinux builds of OpenJDK 17, Mac key generation and import would fail due to the lack of the CKA_SIGN attribute on the key. This attribute is now added as part of the NSS FIPS configuration. (BZ#2105395)
* With the release of AlmaLinux, a change was made so that disabling OpenJDK FIPS mode required the use of both the -Djava.security.disableSystemPropertiesFile=true and -Dcom.AlmaLinux.fips=false options, with the intention that FIPS mode could be controlled independently of system security properties. This change has now been reverted and only -Djava.security.disableSystemPropertiesFile=true is required to disable FIPS mode, as in AlmaLinux. (BZ#2107941)
* Previous AlmaLinux builds of OpenJDK 17 running in FIPS mode with a SecurityManager would fail due to a lack of module access permissions. This has now been corrected. (BZ#2107943)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5736" id="RHSA-2022:5736" type="rhsa" title="RHSA-2022:5736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21540" id="CVE-2022-21540" type="cve" title="CVE-2022-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21541" id="CVE-2022-21541" type="cve" title="CVE-2022-21541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21549" id="CVE-2022-21549" type="cve" title="CVE-2022-21549"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34169" id="CVE-2022-34169" type="cve" title="CVE-2022-34169"/>
      <reference href="https://bugzilla.redhat.com/2108540" id="2108540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108543" id="2108543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108547" id="2108547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108554" id="2108554" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5736.html" id="ALSA-2022:5736" type="self" title="ALSA-2022:5736"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">24db0f88c67f9550e87167dfda19daf9ca29474b397247762f9a47e7d5b011b8</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">2b93f408a31923006f19c413154b7eec765ee7b53628c113ad5364b9a1b0ce16</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">34fe937d82ab93004edf7be54669f70a19ec72240689bfe288323298b1d07436</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">387aea975f89f436cd1b2a9ee32b7d614381027f7badc81a0a61c0ffb4d95119</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">3f7846224b077c69826909ae8f82ecec039ca52da03c91ce04cca1d745dfd8a8</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">62ddfe081f89a21c2668bdd1ffad3fdee7c6117df6eab86f412b32f1d274540a</sum>
        </package>
        <package name="java-17-openjdk-devel" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">6771617bef156727698c7aab9cc6abb1a483e90634629d0bf2685a356c588749</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">722c850f0f06a8b092de99623e3d24892372182ff1056586645524796b6fd809</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">7ce758d7226ecc78bfb76bfe73ca6f2abc1a796c15b27764224bedd3db45c54e</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">95f144cf0823b9fd736bc02a3c6e6940bcd8b978bac3a9dfdd386f9176efa9b2</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">9e20e557167a421e5b322eb2fd2e383122f757b0c57921e207b41737d2859471</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b193b74ef98fc43242a4acfc7f1448286ea6e029bed92591b0cffc389c1102c1</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">de6a8848752ec754063a4913f108c5c704445767d7717fbe4859714fb9c74bfa</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">e7ce0ff503f361e9749c61e9c4f180764366a579a068e10e7b2b427b1aacd148</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">f3ff12b9089a06177e25f59635deecae412dd7d21c1d6aec51bcb28d522e40ce</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.4.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.4.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.4.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">f6b3c11d4d12c836ec3ff792d549394f66add574e64d7e612a66560978f73fb6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5948</id>
    <title>Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update</title>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-10 07:03:13"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>galera, mariadb, and mysql-selinux security, bug fix, and enhancement update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. 
The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16), mysql-selinux (1.0.5).
Security Fix(es):
* mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669)
* mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048)
* mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050)
* mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051)
* mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052)
* mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376)
* mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377)
* mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378)
* mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379)
* mariadb: server crash at my_decimal::operator= (CVE-2022-27380)
* mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381)
* mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382)
* mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383)
* mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384)
* mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386)
* mariadb: assertion failures in decimal_bin_size (CVE-2022-27387)
* mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444)
* mariadb: assertion failure in compare_order_elements (CVE-2022-27445)
* mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446)
* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447)
* mariadb: crash in multi-update and implicit grouping (CVE-2022-27448)
* mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449)
* mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451)
* mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452)
* mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455)
* mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456)
* mariadb: incorrect key in "dup value" error after long unique (CVE-2022-27457)
* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458)
* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622)
* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623)
* mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659)
* mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661)
* mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663)
* mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664)
* mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665)
* mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5948" id="RHSA-2022:5948" type="rhsa" title="RHSA-2022:5948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46659" id="CVE-2021-46659" type="cve" title="CVE-2021-46659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46661" id="CVE-2021-46661" type="cve" title="CVE-2021-46661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46663" id="CVE-2021-46663" type="cve" title="CVE-2021-46663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46664" id="CVE-2021-46664" type="cve" title="CVE-2021-46664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46665" id="CVE-2021-46665" type="cve" title="CVE-2021-46665"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46668" id="CVE-2021-46668" type="cve" title="CVE-2021-46668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46669" id="CVE-2021-46669" type="cve" title="CVE-2021-46669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24048" id="CVE-2022-24048" type="cve" title="CVE-2022-24048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24050" id="CVE-2022-24050" type="cve" title="CVE-2022-24050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24051" id="CVE-2022-24051" type="cve" title="CVE-2022-24051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24052" id="CVE-2022-24052" type="cve" title="CVE-2022-24052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27376" id="CVE-2022-27376" type="cve" title="CVE-2022-27376"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27377" id="CVE-2022-27377" type="cve" title="CVE-2022-27377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27378" id="CVE-2022-27378" type="cve" title="CVE-2022-27378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27379" id="CVE-2022-27379" type="cve" title="CVE-2022-27379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27380" id="CVE-2022-27380" type="cve" title="CVE-2022-27380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27381" id="CVE-2022-27381" type="cve" title="CVE-2022-27381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27382" id="CVE-2022-27382" type="cve" title="CVE-2022-27382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27383" id="CVE-2022-27383" type="cve" title="CVE-2022-27383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27384" id="CVE-2022-27384" type="cve" title="CVE-2022-27384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27386" id="CVE-2022-27386" type="cve" title="CVE-2022-27386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27387" id="CVE-2022-27387" type="cve" title="CVE-2022-27387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27444" id="CVE-2022-27444" type="cve" title="CVE-2022-27444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27445" id="CVE-2022-27445" type="cve" title="CVE-2022-27445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27446" id="CVE-2022-27446" type="cve" title="CVE-2022-27446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27447" id="CVE-2022-27447" type="cve" title="CVE-2022-27447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27448" id="CVE-2022-27448" type="cve" title="CVE-2022-27448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27449" id="CVE-2022-27449" type="cve" title="CVE-2022-27449"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27451" id="CVE-2022-27451" type="cve" title="CVE-2022-27451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27452" id="CVE-2022-27452" type="cve" title="CVE-2022-27452"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27455" id="CVE-2022-27455" type="cve" title="CVE-2022-27455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27456" id="CVE-2022-27456" type="cve" title="CVE-2022-27456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27457" id="CVE-2022-27457" type="cve" title="CVE-2022-27457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27458" id="CVE-2022-27458" type="cve" title="CVE-2022-27458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31622" id="CVE-2022-31622" type="cve" title="CVE-2022-31622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-31623" id="CVE-2022-31623" type="cve" title="CVE-2022-31623"/>
      <reference href="https://bugzilla.redhat.com/2049302" id="2049302" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050017" id="2050017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050022" id="2050022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050024" id="2050024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050026" id="2050026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050032" id="2050032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2050034" id="2050034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068211" id="2068211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068233" id="2068233" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2068234" id="2068234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2069833" id="2069833" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074817" id="2074817" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074947" id="2074947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074949" id="2074949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074951" id="2074951" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074966" id="2074966" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074981" id="2074981" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074987" id="2074987" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074996" id="2074996" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074999" id="2074999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075005" id="2075005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075006" id="2075006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075691" id="2075691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075692" id="2075692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075693" id="2075693" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075694" id="2075694" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075695" id="2075695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075696" id="2075696" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075697" id="2075697" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075699" id="2075699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075700" id="2075700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075701" id="2075701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2076144" id="2076144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2076145" id="2076145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092354" id="2092354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092360" id="2092360" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5948.html" id="ALSA-2022:5948" type="self" title="ALSA-2022:5948"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="mariadb-backup" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-backup-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">2b79935a79b9b38dacbb156955865e3c015186a6a1363d467278078f65d8b073</sum>
        </package>
        <package name="mariadb-server-utils" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-server-utils-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">46eeb4cf8bdfd728a093181b7f0b22e9b18aad5f873b91b38e6ab620525e3ed4</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-oqgraph-engine-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">4998e4b26b0370c2b7b888e954e0d26fa62e667d96eae0069205f278a1ae4551</sum>
        </package>
        <package name="mariadb-server" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-server-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">65adc8d50f18a4bffd1f335ec7138feb7b6a6e60cd7653265fd65f6d52b5e698</sum>
        </package>
        <package name="mariadb" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">732dab00be1c7d2e6210d5fc0c8c550200c36a01fe46a1711415b7ec02e4814a</sum>
        </package>
        <package name="mariadb-pam" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-pam-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">975261dfe362348bff47e4058e7610a0d257083310b33ae579a88c299163ebc4</sum>
        </package>
        <package name="mariadb-common" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-common-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b04fd9035206c6e2ae9b2dcf76f0ee1da63604f23a45c67c04a5ce13b45897ff</sum>
        </package>
        <package name="mariadb-test" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-test-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b2dcbba4ed23cf529d96b736292034086c6914479b6a39e6d91039427219975a</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-gssapi-server-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b6aa9f15ceab06fc61a8e8abe4c990da3659a20f42c17909222aef3324ceb8bb</sum>
        </package>
        <package name="mariadb-devel" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-devel-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">bd2f1ed7cfb768fe1ec4ede49366f7d3f90fac87363d3dd97ee7ce64ed42d38c</sum>
        </package>
        <package name="mariadb-embedded" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-embedded-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">f2e6037e84dbd95103119d290e7972b72c4052717964e9d18590eb8688a62396</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-embedded-devel-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">fa1e775a824f64274a62358ac5e0df3fd48a356ef74cab87073ee864ead2522a</sum>
        </package>
        <package name="mariadb-errmsg" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-errmsg-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">fa3e41f38a47a6f4660060e152b669f8b29552903d0ab0a0c1af820b9b0066ca</sum>
        </package>
        <package name="mariadb-server-galera" version="10.5.16" release="2.el9_0" epoch="3" arch="s390x" src="mariadb-10.5.16-2.el9_0.src.rpm">
          <filename>mariadb-server-galera-10.5.16-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">fefd371740d55e6748ad87e7a5dc218a8825baae9316e4069a6e279df3053103</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6003</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-10 21:25:21"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* information leak in scsi_ioctl() (CVE-2022-0494)
* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Power9 - LPAR fails to boot in shared processing mode and call traces are seen [Hash] (BZ#2092248)
* Hard lockups are observed while running stress-ng and LPAR hangs (BZ#2092253)
* FIPS module identification via name and version (BZ#2093384)
* gfs2: File corruption with large writes when memory is tight (BZ#2097306)
* i/o on initiator stuck when network is disrupted (4.18.0-372.9.1.el8.x86_64) (BZ#2098251)
* AlmaLinux 9.1 doesn't support 3rd SATA (BZ#2099740)
* Guest call trace when reboot after postcopy migration with high stress workload (BZ#2100903)
* Oops or general protection fault with RIP decode_attr_security_label at decode_getfattr_attrs (BZ#2101854)
* Oops as BUG: unable to handle page fault as free of uninitialized nfs4_label on nfs referral lookup (BZ#2101858)
* lpar crash with Oops: Kernel access of bad area, sig: 11 [#1] when changing mtu of a bond interface (P10/ ibmvnic/ Haleakala) (BZ#2103085)
* OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2109974)
Enhancement(s):
* iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (BZ#2105326)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6003" id="RHSA-2022:6003" type="rhsa" title="RHSA-2022:6003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0494" id="CVE-2022-0494" type="cve" title="CVE-2022-0494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1055" id="CVE-2022-1055" type="cve" title="CVE-2022-1055"/>
      <reference href="https://bugzilla.redhat.com/2039448" id="2039448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070220" id="2070220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6003.html" id="ALSA-2022:6003" type="self" title="ALSA-2022:6003"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="kernel-core" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-core-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">0644481c45fb6b0969b5597e1b07ab567a10b60d9416941abb275682fe21462b</sum>
        </package>
        <package name="bpftool" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>bpftool-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">156982325685f1eecbd0586c2a75a76b568875cd1f1d2e8ecc3df0cdc9c371e5</sum>
        </package>
        <package name="kernel-doc" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-doc-5.14.0-70.22.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">232d05e4af484d9fb62fcffcdb7b23f898a654e8107f29507eaa1d61344427aa</sum>
        </package>
        <package name="kernel-debug-core" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-core-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">24d188c95afb3f367976170f99f22b96a5373e6e808da9e27aaf4ec37ba642b9</sum>
        </package>
        <package name="kernel-headers" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-headers-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">258f0be2224fa3f2295c4c07c2494e53114bd6dd0a6e95847d6cea89c77fd8d8</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">26df0e894bfe2bddbbf1c79fdbc08b7c626adb1f7ca32a8a2c2e46be04dfd53c</sum>
        </package>
        <package name="kernel-debug-modules" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">2a1469c0c44b7290cd72246a98c87332841058be3fb29dae8cbdc4375bfb27f5</sum>
        </package>
        <package name="perf" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>perf-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">3c5b628aa62ecf6e50abe12ba5076b3d2922ec60d43bc2ace91a57b76033fd5c</sum>
        </package>
        <package name="kernel-zfcpdump-devel-matched" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-matched-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">41c5293fe8405da40a0e509c6e778d27374b3c743e1a5e07d7d57e5ef31e034f</sum>
        </package>
        <package name="kernel-modules" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-modules-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">4226cc3e39177830aac6b00cd92c65b2da64e64c9ab2ea086fcd110aa7d67a73</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-cross-headers-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">4a945f9f27e425cd30e4f513d94161b86252ccb9ce8d737cd77faafeef9dd289</sum>
        </package>
        <package name="kernel-tools" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-tools-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">5dfb3530c7f5f0abc4a2f1d4ae60f37ee22bf3cdab97e58f06657c3d9adfe176</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-core-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">713c3f2f80f07f73f086ef1d4b7cba5e041d684d93663ec8c37e6a1f7b121e45</sum>
        </package>
        <package name="kernel-zfcpdump-devel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-devel-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">77a4d8749a4cc28f425cf8a2c74fb5b75c5744afb56ecc0739e9bb2e8c4fd4bb</sum>
        </package>
        <package name="kernel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">83bab7059170940d38429006e1294a608d064489eeedf4d786f0f9c30fa3f57c</sum>
        </package>
        <package name="kernel-devel-matched" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-devel-matched-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">89873b6dd6b279acb752ef1c24f54b7c1749032f2ccf14ae08467a4f91aa4046</sum>
        </package>
        <package name="kernel-debug-devel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">9a3d61a0cc86655206e4df2bc373e8aab4b4f6b53e478d4f653e5c4495356a3e</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-modules-extra-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">9ec86f69e12e4625e1fa0525b5668f9e7e4534561521cccdc5fc1686198ec1d2</sum>
        </package>
        <package name="kernel-abi-stablelists" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="noarch" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-abi-stablelists-5.14.0-70.22.1.el9_0.noarch.rpm</filename>
          <sum type="sha256">a7507bb31645b36cd5120e3dee6c9f7928ea50fa4707527e8af610752ebdea2e</sum>
        </package>
        <package name="kernel-debug" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ab2767e4b22e4d31ec41d37ac33c5bdde0a779b2a85909cc352c1b189533619b</sum>
        </package>
        <package name="python3-perf" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>python3-perf-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">cc4bd21bec173e015820b8a211bb005ef5def3b6559b63243761204f536dca66</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-debug-devel-matched-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ce291f2dd2ed2a92acd5401273330e0ca02b5ee228617329e20db3e25d8c1776</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-modules-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ceae4af4aedc55ebd2f29b9aa774b5488b19a650bfb95c216e8a09216fbce136</sum>
        </package>
        <package name="kernel-zfcpdump" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-zfcpdump-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">dba4d7ecb3300f6c675fed35c43013b84820865a93201413783dc558e78850bd</sum>
        </package>
        <package name="kernel-devel" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-devel-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">fc0e3030e061696ef149861997da4b337cbd741a3863139b1cbb96ad6cf52edb</sum>
        </package>
        <package name="kernel-modules-extra" version="5.14.0" release="70.22.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.22.1.el9_0.src.rpm">
          <filename>kernel-modules-extra-5.14.0-70.22.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">ffffa93f2ee3672af348482d6849fc0a57469603ea3b1447326f00df1e50fdb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6043</id>
    <title>Moderate: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2022-08-10 00:00:00"/>
    <updated date="2022-08-10 21:12:17"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.108 and .NET Runtime 6.0.8.
Security Fix(es):
* dotnet: External Entity Injection during XML signature verification (CVE-2022-34716)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6043" id="RHSA-2022:6043" type="rhsa" title="RHSA-2022:6043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34716" id="CVE-2022-34716" type="cve" title="CVE-2022-34716"/>
      <reference href="https://bugzilla.redhat.com/2115183" id="2115183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6043.html" id="ALSA-2022:6043" type="self" title="ALSA-2022:6043"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="dotnet-templates-6.0" version="6.0.108" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-templates-6.0-6.0.108-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">321f0ca55f249ee7eb74eb5cd0fe991c6f3572e421eeea33fa293b119c38617a</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">3ddbd4f95120658648ef691e54a75d682925daa5482c499f4be45ced0bcd4bc5</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">5a22120709fd668f7855a33834a980b330020e831e32f182d4d3fb6b47edd41c</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">652e1d0307b8bdd541ed78fea9c33c6d31827cfe81f84974a6e2a3f9a53a9354</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">9e90661c3da2338e62f07d71cbf9e187be9e0bccb5072212fc29074a8bfe81aa</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">a7ee85d67d78b29da9ccaf30af208af3821558a4924869fe4535ede265e0047b</sum>
        </package>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.108" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.108-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">aa3fd3db6e6e482093b1aef9ae9a4e1571fafc4af58d44f36524eac202e524b9</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">b8c5125f7b2697d75647a903cd7f3b79af7af5a77769bae874c5a8b28e310c08</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.108" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.108-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">bcea0bf0024dfc1219d27cc66d7a3a96a49b72eeac42cfe3079898cbca19cc70</sum>
        </package>
        <package name="dotnet-host" version="6.0.8" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>dotnet-host-6.0.8-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">c6573742163d39e9df9c6e7c1cbb39682172b59cc469850e80da74effba77e54</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="6.0.108" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.108-1.el9_0.src.rpm">
          <filename>netstandard-targeting-pack-2.1-6.0.108-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">e3f12fa5e07917de2917cf3e1033738dd854b055c072356d7535ccbc631c1ea2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6521</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-09-14 00:00:00"/>
    <updated date="2022-10-14 09:06:39"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.109 and Runtime 6.0.9.

Security Fix(es):

* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6521" id="RHSA-2022:6521" type="rhsa" title="RHSA-2022:6521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38013" id="CVE-2022-38013" type="cve" title="CVE-2022-38013"/>
      <reference href="https://bugzilla.redhat.com/2125124" id="2125124" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6521.html" id="ALSA-2022:6521" type="self" title="ALSA-2022:6521"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.109" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.109-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">6747957b87fcb492e6732bce37c0f8d1e7c675fdcae5e6be74db814a5f83a533</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6585</id>
    <title>Moderate: ruby security, bug fix, and enhancement update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-19 07:17:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby security, bug fix, and enhancement update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby (3.0.4). (BZ#2109428)

Security Fix(es):

* Ruby: Double free in Regexp compilation (CVE-2022-28738)
* Ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6585" id="RHSA-2022:6585" type="rhsa" title="RHSA-2022:6585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28738" id="CVE-2022-28738" type="cve" title="CVE-2022-28738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28739" id="CVE-2022-28739" type="cve" title="CVE-2022-28739"/>
      <reference href="https://bugzilla.redhat.com/2075685" id="2075685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2075687" id="2075687" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6585.html" id="ALSA-2022:6585" type="self" title="ALSA-2022:6585"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="ruby-doc" version="3.0.4" release="160.el9_0" epoch="0" arch="noarch" src="ruby-3.0.4-160.el9_0.src.rpm">
          <filename>ruby-doc-3.0.4-160.el9_0.noarch.rpm</filename>
          <sum type="sha256">c5aa94f05bb1afcbd2618a66cc942c7ed10a4ef69aae59317f0d3d7ee3173120</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6590</id>
    <title>Moderate: mysql security, bug fix, and enhancement update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-19 07:05:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security, bug fix, and enhancement update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30). (BZ#2122589)

Security Fix(es):

* mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479)
* mysql: Server: DML unspecified vulnerability (CPU Apr 2022) (CVE-2022-21413)
* mysql: Server: Replication unspecified vulnerability (CPU Apr 2022) (CVE-2022-21415)
* mysql: InnoDB multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21423)
* mysql: Server: DDL multiple unspecified vulnerabilities (CPU Apr 2022) (CVE-2022-21425, CVE-2022-21444)
* mysql: Server: FTS unspecified vulnerability (CPU Apr 2022) (CVE-2022-21427)
* mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21454)
* mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Jul 2022) (CVE-2022-21455)
* mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Apr 2022) (CVE-2022-21457)
* mysql: Server: Logging unspecified vulnerability (CPU Apr 2022) (CVE-2022-21460)
* mysql: Server: Optimizer multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21556, CVE-2022-21569)
* mysql: Server: Options unspecified vulnerability (CPU Jul 2022) (CVE-2022-21515)
* mysql: InnoDB multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21517, CVE-2022-21537, CVE-2022-21539)
* mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CPU Jul 2022) (CVE-2022-21522, CVE-2022-21534)
* mysql: Server: Federated unspecified vulnerability (CPU Jul 2022) (CVE-2022-21547)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jul 2022) (CVE-2022-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Default logrotate set to wrong log file (BZ#2122592)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6590" id="RHSA-2022:6590" type="rhsa" title="RHSA-2022:6590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21412" id="CVE-2022-21412" type="cve" title="CVE-2022-21412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21413" id="CVE-2022-21413" type="cve" title="CVE-2022-21413"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21414" id="CVE-2022-21414" type="cve" title="CVE-2022-21414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21415" id="CVE-2022-21415" type="cve" title="CVE-2022-21415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21417" id="CVE-2022-21417" type="cve" title="CVE-2022-21417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21418" id="CVE-2022-21418" type="cve" title="CVE-2022-21418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21423" id="CVE-2022-21423" type="cve" title="CVE-2022-21423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21425" id="CVE-2022-21425" type="cve" title="CVE-2022-21425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21427" id="CVE-2022-21427" type="cve" title="CVE-2022-21427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21435" id="CVE-2022-21435" type="cve" title="CVE-2022-21435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21436" id="CVE-2022-21436" type="cve" title="CVE-2022-21436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21437" id="CVE-2022-21437" type="cve" title="CVE-2022-21437"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21438" id="CVE-2022-21438" type="cve" title="CVE-2022-21438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21440" id="CVE-2022-21440" type="cve" title="CVE-2022-21440"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21444" id="CVE-2022-21444" type="cve" title="CVE-2022-21444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21451" id="CVE-2022-21451" type="cve" title="CVE-2022-21451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21452" id="CVE-2022-21452" type="cve" title="CVE-2022-21452"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21454" id="CVE-2022-21454" type="cve" title="CVE-2022-21454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21455" id="CVE-2022-21455" type="cve" title="CVE-2022-21455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21457" id="CVE-2022-21457" type="cve" title="CVE-2022-21457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21459" id="CVE-2022-21459" type="cve" title="CVE-2022-21459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21460" id="CVE-2022-21460" type="cve" title="CVE-2022-21460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21462" id="CVE-2022-21462" type="cve" title="CVE-2022-21462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21478" id="CVE-2022-21478" type="cve" title="CVE-2022-21478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21479" id="CVE-2022-21479" type="cve" title="CVE-2022-21479"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21509" id="CVE-2022-21509" type="cve" title="CVE-2022-21509"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21515" id="CVE-2022-21515" type="cve" title="CVE-2022-21515"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21517" id="CVE-2022-21517" type="cve" title="CVE-2022-21517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21522" id="CVE-2022-21522" type="cve" title="CVE-2022-21522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21525" id="CVE-2022-21525" type="cve" title="CVE-2022-21525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21526" id="CVE-2022-21526" type="cve" title="CVE-2022-21526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21527" id="CVE-2022-21527" type="cve" title="CVE-2022-21527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21528" id="CVE-2022-21528" type="cve" title="CVE-2022-21528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21529" id="CVE-2022-21529" type="cve" title="CVE-2022-21529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21530" id="CVE-2022-21530" type="cve" title="CVE-2022-21530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21531" id="CVE-2022-21531" type="cve" title="CVE-2022-21531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21534" id="CVE-2022-21534" type="cve" title="CVE-2022-21534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21537" id="CVE-2022-21537" type="cve" title="CVE-2022-21537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21538" id="CVE-2022-21538" type="cve" title="CVE-2022-21538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21539" id="CVE-2022-21539" type="cve" title="CVE-2022-21539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21547" id="CVE-2022-21547" type="cve" title="CVE-2022-21547"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21553" id="CVE-2022-21553" type="cve" title="CVE-2022-21553"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21556" id="CVE-2022-21556" type="cve" title="CVE-2022-21556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21569" id="CVE-2022-21569" type="cve" title="CVE-2022-21569"/>
      <reference href="https://bugzilla.redhat.com/2082636" id="2082636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082637" id="2082637" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082638" id="2082638" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082639" id="2082639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082640" id="2082640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082641" id="2082641" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082642" id="2082642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082643" id="2082643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082644" id="2082644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082645" id="2082645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082646" id="2082646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082647" id="2082647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082648" id="2082648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082649" id="2082649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082650" id="2082650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082651" id="2082651" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082652" id="2082652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082653" id="2082653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082654" id="2082654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082655" id="2082655" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082656" id="2082656" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082657" id="2082657" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082658" id="2082658" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2082659" id="2082659" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115282" id="2115282" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115283" id="2115283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115284" id="2115284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115285" id="2115285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115286" id="2115286" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115287" id="2115287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115288" id="2115288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115289" id="2115289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115290" id="2115290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115291" id="2115291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115292" id="2115292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115293" id="2115293" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115294" id="2115294" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115295" id="2115295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115296" id="2115296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115297" id="2115297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115298" id="2115298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115299" id="2115299" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115300" id="2115300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115301" id="2115301" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6590.html" id="ALSA-2022:6590" type="self" title="ALSA-2022:6590"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="mysql-libs" version="8.0.30" release="3.el9_0" epoch="0" arch="s390x" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-libs-8.0.30-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">0c26f1f99da382fabc1d400f3ce513d217b66b97c7d9f27db09d686f1304acb4</sum>
        </package>
        <package name="mysql-test" version="8.0.30" release="3.el9_0" epoch="0" arch="s390x" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-test-8.0.30-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">41574e6779cd1efae7dd2b5f4d0e69872c39693a9d416850640ec25c7fd0cdac</sum>
        </package>
        <package name="mysql-devel" version="8.0.30" release="3.el9_0" epoch="0" arch="s390x" src="mysql-8.0.30-3.el9_0.src.rpm">
          <filename>mysql-devel-8.0.30-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">f004412da5c9424942ff688cc1e621cfd13d2d0ac5bb70309ddaf3499a3f1f0c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6610</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-14 13:22:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: heap overflow in nft_set_elem_init() (CVE-2022-34918)
* kernel: vulnerability of buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* RDMA/mlx5: Fix number of allocated XLT entries (BZ#2092270)
* mlx5, Setup hanged when run test-route-nexthop-object.sh (BZ#2092535)
* many call traces from unchecked MSR access error: WRMSR to 0x199 in amazon i4.32xlarge instance (BZ#2099417)
* X86/platform/UV: Kernel Support Fixes for UV5 platform (BZ#2107732)
* block layer: fixes for md sync slow and softlockup at blk_mq_sched_dispatch_requests [9.0.0.z] (BZ#2111395)
* Fixes for NVMe/TCP dereferences an invalid, non-canonical pointer, kernel panic (BZ#2117755)
* Adding missing nvme fix to AlmaLinux-9.1 (BZ#2117756)
* nvme/tcp mistakenly uses blk_mq_tag_to_rq(nvme_tcp_tagset(queue) (BZ#2118698)
* Important ice bug fixes (BZ#2119290)
* Power 9/ppc64le Incorrect Socket(s) &amp; "Core(s) per socket" reported by lscpu command. (BZ#2121719)

Enhancement(s):

* lscpu does not show all of the support AMX flags (amx_int8, amx_bf16)  (BZ#2108203)
* ice: Driver Update (BZ#2108204)
* iavf: Driver Update (BZ#2119477)
* i40e: Driver Update (BZ#2119479)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6610" id="RHSA-2022:6610" type="rhsa" title="RHSA-2022:6610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2078" id="CVE-2022-2078" type="cve" title="CVE-2022-2078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34918" id="CVE-2022-34918" type="cve" title="CVE-2022-34918"/>
      <reference href="https://bugzilla.redhat.com/2096178" id="2096178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104423" id="2104423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6610.html" id="ALSA-2022:6610" type="self" title="ALSA-2022:6610"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="70.26.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.26.1.el9_0.src.rpm">
          <filename>kernel-cross-headers-5.14.0-70.26.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">b14d5d1cd67560760a2545f7d7ca86f37d6de4663436c70d3be20b2699c55d51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6763</id>
    <title>Important: bind security update</title>
    <issued date="2022-10-03 00:00:00"/>
    <updated date="2022-10-14 16:04:13"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)
* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)
* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6763" id="RHSA-2022:6763" type="rhsa" title="RHSA-2022:6763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3080" id="CVE-2022-3080" type="cve" title="CVE-2022-3080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38177" id="CVE-2022-38177" type="cve" title="CVE-2022-38177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38178" id="CVE-2022-38178" type="cve" title="CVE-2022-38178"/>
      <reference href="https://bugzilla.redhat.com/2128600" id="2128600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128601" id="2128601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128602" id="2128602" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6763.html" id="ALSA-2022:6763" type="self" title="ALSA-2022:6763"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="bind-devel" version="9.16.23" release="1.el9_0.1" epoch="32" arch="s390x" src="bind-9.16.23-1.el9_0.1.src.rpm">
          <filename>bind-devel-9.16.23-1.el9_0.1.s390x.rpm</filename>
          <sum type="sha256">0f855846bdcc1b144a2d5ad60b1ca4f8c6c90212992f7db93bd7df2af72dae7c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6913</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-10-12 00:00:00"/>
    <updated date="2022-10-19 07:54:27"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  6.0.110 and .NET Runtime 6.0.10.

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6913" id="RHSA-2022:6913" type="rhsa" title="RHSA-2022:6913"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6913.html" id="ALSA-2022:6913" type="self" title="ALSA-2022:6913"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.110" release="1.el9_0" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el9_0.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.110-1.el9_0.s390x.rpm</filename>
          <sum type="sha256">fcc56c8f7f80344ec336aa4b2cadc9eb5f345361c041c484a34d25c1f5334df2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6999</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2022-10-20 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 17.0.5) [almalinux-9] (BZ#2132934)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6999" id="RHSA-2022:6999" type="rhsa" title="RHSA-2022:6999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6999.html" id="ALSA-2022:6999" type="self" title="ALSA-2022:6999"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">1fd449f132d4128cc91329c5ae4798d3c05d35b0c363fde2ad2963dca9950533</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">3652f1ed7663cede673bc01a0f66c0c175afea4d972689f746aaec3d5ade7811</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">6427f9b3d3c8653cfe5a8b4aa947b6a15eb356e63758cf374575ae5214046578</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">730b8443b243d792a81cf127a1162830ce71ea9d41e7babfdb9c5a7606b8231a</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">ac9319ba68d53a8d7f5b4bd8de8bcc7b490e4f41cd24975f10bd9d29bcaabbe3</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">aea3a320bd4e5e3e531de24323455c9910d391d07664d478f58b393f61fd2a3b</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.5.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el9_0.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.5.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">f6db8dc9858b277c821f01c9db9120b2bc79a01f6ffb981bd601213a9acea918</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7013</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2022-10-20 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 11.0.17) [almalinux-9] (BZ#2131865)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7013" id="RHSA-2022:7013" type="rhsa" title="RHSA-2022:7013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7013.html" id="ALSA-2022:7013" type="self" title="ALSA-2022:7013"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">0136ecfb270ba7ff119bc24a023c8d5de8849a2ce6e202f4e624e849afa31d44</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">197d8c9aab3b0b968517cc8b6d5dfdcc1c1be64f15921d664d7c46f119a5fdc0</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">60bc1ca12eedd209b34364eba099a0c378c6b488550a5383b65295a12e85f23d</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">7acbefce93a965b4229ea291288e45c841e658d1a2afb8eee6c2ffb3c9c84ffc</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">7e71bb30ee42194a4585cbc99dfc99034ed5e95264a9e34e25e08963515ba507</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">82a5cb9b1cae682fabb6202dda1e7a15a829df38554bc5f7dd73d40d02419703</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.17.0.8" release="2.el9_0" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el9_0.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.17.0.8-2.el9_0.s390x.rpm</filename>
          <sum type="sha256">b7c3e77ba30672475111eec35682610cd28c07f2dee5a8d1341434fed52b092e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7090</id>
    <title>Important: libksba security update</title>
    <issued date="2022-10-24 00:00:00"/>
    <updated date="2022-10-26 12:07:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications.  Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7090" id="RHSA-2022:7090" type="rhsa" title="RHSA-2022:7090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3515" id="CVE-2022-3515" type="cve" title="CVE-2022-3515"/>
      <reference href="https://bugzilla.redhat.com/2135610" id="2135610" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7090.html" id="ALSA-2022:7090" type="self" title="ALSA-2022:7090"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="libksba-devel" version="1.5.1" release="5.el9_0" epoch="0" arch="s390x" src="libksba-1.5.1-5.el9_0.src.rpm">
          <filename>libksba-devel-1.5.1-5.el9_0.s390x.rpm</filename>
          <sum type="sha256">5d31961559861193512120df2f84f442d611fc9737c39d3b1e6f4cd6cd607834</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7185</id>
    <title>Important: device-mapper-multipath security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-26 06:53:24"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>device-mapper-multipath security update</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7185" id="RHSA-2022:7185" type="rhsa" title="RHSA-2022:7185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41974" id="CVE-2022-41974" type="cve" title="CVE-2022-41974"/>
      <reference href="https://bugzilla.redhat.com/2133988" id="2133988" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7185.html" id="ALSA-2022:7185" type="self" title="ALSA-2022:7185"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="device-mapper-multipath-devel" version="0.8.7" release="7.el9_0.1" epoch="0" arch="s390x" src="device-mapper-multipath-0.8.7-7.el9_0.1.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.7-7.el9_0.1.s390x.rpm</filename>
          <sum type="sha256">f1aba5f84b4769b06d73b53e067f32bf1be858018b1851e314a1b5a7ab27c690</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7314</id>
    <title>Moderate: zlib security update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-02 21:25:38"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zlib security update</summary>
    <description>The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.

Security Fix(es):

* zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7314" id="RHSA-2022:7314" type="rhsa" title="RHSA-2022:7314"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37434" id="CVE-2022-37434" type="cve" title="CVE-2022-37434"/>
      <reference href="https://bugzilla.redhat.com/2116639" id="2116639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7314.html" id="ALSA-2022:7314" type="self" title="ALSA-2022:7314"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="zlib-static" version="1.2.11" release="32.el9_0" epoch="0" arch="s390x" src="zlib-1.2.11-32.el9_0.src.rpm">
          <filename>zlib-static-1.2.11-32.el9_0.s390x.rpm</filename>
          <sum type="sha256">786a1206d349e64db5f7969555f525f8e3e85b9577ca209b4694238b39b84f7c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7318</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-03 11:11:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585)
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel crash after reboot of T14/G2 AMD laptop (mt7921e module) (BZ#2095653)
* execve exit tracepoint not called (BZ#2106661)
* Matrox black screen on VGA output on some systems. (BZ#2112017)
* The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (BZ#2121129)
* watchdog BUG: soft lockup - CPU#30 stuck for 34s! [swapper/30:0] (BZ#2127857)
* Update cifs to 5.16 (BZ#2127858)
* Bad page state in process qemu-kvm  pfn:68a74600 (BZ#2127859)
* vfio zero page mappings fail after 2M instances (BZ#2128791)
* The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (part 2) (BZ#2128970)

Enhancement(s):

* Need to enable hpilo to support new HPE RL300 Gen11 for ARM (aarch64) (BZ#2129453)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7318" id="RHSA-2022:7318" type="rhsa" title="RHSA-2022:7318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2585" id="CVE-2022-2585" type="cve" title="CVE-2022-2585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594"/>
      <reference href="https://bugzilla.redhat.com/2085300" id="2085300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114874" id="2114874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7318.html" id="ALSA-2022:7318" type="self" title="ALSA-2022:7318"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="70.30.1.el9_0" epoch="0" arch="s390x" src="kernel-5.14.0-70.30.1.el9_0.src.rpm">
          <filename>kernel-cross-headers-5.14.0-70.30.1.el9_0.s390x.rpm</filename>
          <sum type="sha256">687f0a2c0a817340cd36e8d0a7e80fb436a98df17cc4866d1b3d30518382cbfb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7323</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-03 06:47:46"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7323" id="RHSA-2022:7323" type="rhsa" title="RHSA-2022:7323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-10735" id="CVE-2020-10735" type="cve" title="CVE-2020-10735"/>
      <reference href="https://bugzilla.redhat.com/1834423" id="1834423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7323.html" id="ALSA-2022:7323" type="self" title="ALSA-2022:7323"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="python3-debug" version="3.9.10" release="3.el9_0" epoch="0" arch="s390x" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python3-debug-3.9.10-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">8a59201e190dcaa68bf6972a1a0607069ad86665f30580d8177d3394d88eeffc</sum>
        </package>
        <package name="python3-idle" version="3.9.10" release="3.el9_0" epoch="0" arch="s390x" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python3-idle-3.9.10-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">abddb05e7ab608ba2f4567fd72c82f7f0dbf5af798759fcbff730bafb5a6d4a3</sum>
        </package>
        <package name="python3-test" version="3.9.10" release="3.el9_0" epoch="0" arch="s390x" src="python3.9-3.9.10-3.el9_0.src.rpm">
          <filename>python3-test-3.9.10-3.el9_0.s390x.rpm</filename>
          <sum type="sha256">c3ad51def2e40138cb5dc5c176f736c745c712af42581056c13702ba1f11c8fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7329</id>
    <title>Moderate: lua security update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-03 06:47:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>lua security update</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling (CVE-2022-33099)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7329" id="RHSA-2022:7329" type="rhsa" title="RHSA-2022:7329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33099" id="CVE-2022-33099" type="cve" title="CVE-2022-33099"/>
      <reference href="https://bugzilla.redhat.com/2104427" id="2104427" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7329.html" id="ALSA-2022:7329" type="self" title="ALSA-2022:7329"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_default</name>
        <package name="lua-devel" version="5.4.2" release="4.el9_0.3" epoch="0" arch="s390x" src="lua-5.4.2-4.el9_0.3.src.rpm">
          <filename>lua-devel-5.4.2-4.el9_0.3.s390x.rpm</filename>
          <sum type="sha256">c345598381aa00205494f3165374390ff6c05e08bc676c5b985ab14f6772ebf5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7958</id>
    <title>Low: libguestfs security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:40:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libguestfs security, bug fix, and enhancement update</summary>
    <description>The libguestfs packages contain a library used for accessing and modifying virtual machine disk images.

Security Fix(es):

* libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7958" id="RHSA-2022:7958" type="rhsa" title="RHSA-2022:7958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2211" id="CVE-2022-2211" type="cve" title="CVE-2022-2211"/>
      <reference href="https://bugzilla.redhat.com/2100862" id="2100862" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7958.html" id="ALSA-2022:7958" type="self" title="ALSA-2022:7958"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="libguestfs-gobject-devel" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">0821940086c4dae63c49d58613172cd34cdb7e3eb98afbde3f259343337e6aee</sum>
        </package>
        <package name="libguestfs-gobject" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-gobject-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">549937e5e2ba3316c1335cff071e617b42a26ecdf39fb5bf9c713c4de0ae19ca</sum>
        </package>
        <package name="libguestfs-devel" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-devel-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">5dbd3e3bc557ea7f3aa74ebf16da7d51dfbd987f939c735f383114d84d5bf0c6</sum>
        </package>
        <package name="ruby-libguestfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>ruby-libguestfs-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">642b1242c10a0c101616c890f5e46fd3f99c183eddabdfdb6490a2a5c9a32ccc</sum>
        </package>
        <package name="lua-guestfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>lua-guestfs-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">68a25a7316cb6c86e10ff0a07e73ddbc7074ee1200ffdf6dac56bc653544e98e</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.48.4" release="2.el9.alma" epoch="1" arch="noarch" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.48.4-2.el9.alma.noarch.rpm</filename>
          <sum type="sha256">af4f710b4de913c305b93516d4b72c70a6d6bea6926c1d220a9b862364554647</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.48.4" release="2.el9.alma" epoch="1" arch="noarch" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.48.4-2.el9.alma.noarch.rpm</filename>
          <sum type="sha256">c70d6eb341fe0eca9d22773d7e0310f3848bfed5973fc92f46cd0df16dcb3cdf</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>ocaml-libguestfs-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">c8787793a72b326f42586517b618f053993620851c09e788a2c01e4be7f7599e</sum>
        </package>
        <package name="ocaml-libguestfs-devel" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">da0778232e1b7256e283e08459b12554af3da2d5f505ea9cce9beff9769dc1ae</sum>
        </package>
        <package name="php-libguestfs" version="1.48.4" release="2.el9.alma" epoch="1" arch="s390x" src="libguestfs-1.48.4-2.el9.alma.src.rpm">
          <filename>php-libguestfs-1.48.4-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">f977c1d75f100fe1a011d59ee031530414a795b26fd5f3703d0696939839c92b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7970</id>
    <title>Moderate: protobuf security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:28:25"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf security update</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.

Security Fix(es):

* protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7970" id="RHSA-2022:7970" type="rhsa" title="RHSA-2022:7970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-22570" id="CVE-2021-22570" type="cve" title="CVE-2021-22570"/>
      <reference href="https://bugzilla.redhat.com/2049429" id="2049429" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7970.html" id="ALSA-2022:7970" type="self" title="ALSA-2022:7970"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="protobuf-lite-devel" version="3.14.0" release="13.el9" epoch="0" arch="s390x" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>protobuf-lite-devel-3.14.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">a79c87753f5a6e7a8e2a7c258c4ef13b52f6b54e0962fbd77a79b8497808afa0</sum>
        </package>
        <package name="protobuf-devel" version="3.14.0" release="13.el9" epoch="0" arch="s390x" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>protobuf-devel-3.14.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">f217c79fceb6b792255b8eabff9b40eed97d9c829d8c8d0e2e7e568e5f8f1db3</sum>
        </package>
        <package name="protobuf-compiler" version="3.14.0" release="13.el9" epoch="0" arch="s390x" src="protobuf-3.14.0-13.el9.src.rpm">
          <filename>protobuf-compiler-3.14.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">f242f56c97f46b3a2e4022c55e24eed0cebcdd72275eeea709aa2242c1094070</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7979</id>
    <title>Low: speex security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:19:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>speex security update</summary>
    <description>Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates.

Security Fix(es):

* speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7979" id="RHSA-2022:7979" type="rhsa" title="RHSA-2022:7979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-23903" id="CVE-2020-23903" type="cve" title="CVE-2020-23903"/>
      <reference href="https://bugzilla.redhat.com/2024250" id="2024250" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7979.html" id="ALSA-2022:7979" type="self" title="ALSA-2022:7979"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="speex-devel" version="1.2.0" release="11.el9" epoch="0" arch="s390x" src="speex-1.2.0-11.el9.src.rpm">
          <filename>speex-devel-1.2.0-11.el9.s390x.rpm</filename>
          <sum type="sha256">8a45f3349104bac1fff7ca2af48db8546dbf09e6a8c4d8ebc3aa38b132f0b2d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8003</id>
    <title>Low: libvirt security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:14:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libvirt security, bug fix, and enhancement update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

The following packages have been upgraded to a later upstream version: libvirt (8.5.0). (BZ#2060313)

Security Fix(es):

* libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8003" id="RHSA-2022:8003" type="rhsa" title="RHSA-2022:8003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0897" id="CVE-2022-0897" type="cve" title="CVE-2022-0897"/>
      <reference href="https://bugzilla.redhat.com/2063883" id="2063883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8003.html" id="ALSA-2022:8003" type="self" title="ALSA-2022:8003"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="libvirt-docs" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-docs-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">5f6a32c749e265e16d82ed567cf157be9c29ec6f642c0a7c43a16953585e57f8</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-lock-sanlock-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">6f3858863f1f978519f03ef0155bc9711f84b46afbd07e454db5e91efc470f03</sum>
        </package>
        <package name="libvirt-devel" version="8.5.0" release="7.el9_1" epoch="0" arch="s390x" src="libvirt-8.5.0-7.el9_1.src.rpm">
          <filename>libvirt-devel-8.5.0-7.el9_1.s390x.rpm</filename>
          <sum type="sha256">d07d7034ed1aeef769c83d4ad2a681d7442a624c9a4c859462f5494711683e35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8022</id>
    <title>Moderate: qt5 security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 05:02:08"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5 security and bug fix update</summary>
    <description>The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework.

Security Fix(es):

* qt: QProcess could execute a binary from the current working directory when not found in the PATH (CVE-2022-25255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8022" id="RHSA-2022:8022" type="rhsa" title="RHSA-2022:8022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25255" id="CVE-2022-25255" type="cve" title="CVE-2022-25255"/>
      <reference href="https://bugzilla.redhat.com/2055505" id="2055505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8022.html" id="ALSA-2022:8022" type="self" title="ALSA-2022:8022"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="qt5-devel" version="5.15.3" release="1.el9" epoch="0" arch="noarch" src="qt5-5.15.3-1.el9.src.rpm">
          <filename>qt5-devel-5.15.3-1.el9.noarch.rpm</filename>
          <sum type="sha256">9ebc6c52b9d1433612ea6bf67d160c769264f1496832e938e054352bab4405f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8062</id>
    <title>Moderate: unbound security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:46:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>unbound security, bug fix, and enhancement update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

The following packages have been upgraded to a later upstream version: unbound (1.16.2). (BZ#2087120)

Security Fix(es):

* unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30698)
* unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names (CVE-2022-30699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8062" id="RHSA-2022:8062" type="rhsa" title="RHSA-2022:8062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30698" id="CVE-2022-30698" type="cve" title="CVE-2022-30698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30699" id="CVE-2022-30699" type="cve" title="CVE-2022-30699"/>
      <reference href="https://bugzilla.redhat.com/2116725" id="2116725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2116729" id="2116729" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8062.html" id="ALSA-2022:8062" type="self" title="ALSA-2022:8062"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="unbound-devel" version="1.16.2" release="2.el9" epoch="0" arch="s390x" src="unbound-1.16.2-2.el9.src.rpm">
          <filename>unbound-devel-1.16.2-2.el9.s390x.rpm</filename>
          <sum type="sha256">44bef07e3eb38e96c8704542c2089e759ad2ee1e3043c615c285747500697b0e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8068</id>
    <title>Moderate: bind security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:33:53"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)
* bind: DoS from specifically crafted TCP packets (CVE-2022-0396)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8068" id="RHSA-2022:8068" type="rhsa" title="RHSA-2022:8068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-25220" id="CVE-2021-25220" type="cve" title="CVE-2021-25220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0396" id="CVE-2022-0396" type="cve" title="CVE-2022-0396"/>
      <reference href="https://bugzilla.redhat.com/2064512" id="2064512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064513" id="2064513" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8068.html" id="ALSA-2022:8068" type="self" title="ALSA-2022:8068"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="bind-doc" version="9.16.23" release="5.el9_1" epoch="32" arch="noarch" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-doc-9.16.23-5.el9_1.noarch.rpm</filename>
          <sum type="sha256">7f2b5ebe8235b3d3a50a33d977b33607b5f6be05132c0d35d411e1b8c0c17f3e</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="5.el9_1" epoch="32" arch="s390x" src="bind-9.16.23-5.el9_1.src.rpm">
          <filename>bind-devel-9.16.23-5.el9_1.s390x.rpm</filename>
          <sum type="sha256">a0a6d2dd428c67f5e0385686958244c0e06d29097caf083cd643aedfa79c05d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8078</id>
    <title>Moderate: flac security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:24:40"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>flac security update</summary>
    <description>FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: out of bound write in append_to_verify_fifo_interleaved_ of stream_encoder.c (CVE-2021-0561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8078" id="RHSA-2022:8078" type="rhsa" title="RHSA-2022:8078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-0561" id="CVE-2021-0561" type="cve" title="CVE-2021-0561"/>
      <reference href="https://bugzilla.redhat.com/2057776" id="2057776" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8078.html" id="ALSA-2022:8078" type="self" title="ALSA-2022:8078"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="flac-devel" version="1.3.3" release="10.el9" epoch="0" arch="s390x" src="flac-1.3.3-10.el9.src.rpm">
          <filename>flac-devel-1.3.3-10.el9.s390x.rpm</filename>
          <sum type="sha256">33209ac8b3094fbbd946d69552b8b270d74a2ee6835b2fd14ca48fd9aef51014</sum>
        </package>
        <package name="flac" version="1.3.3" release="10.el9" epoch="0" arch="s390x" src="flac-1.3.3-10.el9.src.rpm">
          <filename>flac-1.3.3-10.el9.s390x.rpm</filename>
          <sum type="sha256">9310d160cd8561d36c052e030c3ab3e814d35702d19c16a6f316a12445bed569</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8139</id>
    <title>Low: wavpack security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 04:00:58"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>wavpack security update</summary>
    <description>WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. 

Security Fix(es):

* wavpack: Heap out-of-bounds read in WavpackPackSamples() (CVE-2021-44269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8139" id="RHSA-2022:8139" type="rhsa" title="RHSA-2022:8139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44269" id="CVE-2021-44269" type="cve" title="CVE-2021-44269"/>
      <reference href="https://bugzilla.redhat.com/2064457" id="2064457" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8139.html" id="ALSA-2022:8139" type="self" title="ALSA-2022:8139"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="wavpack-devel" version="5.4.0" release="5.el9" epoch="0" arch="s390x" src="wavpack-5.4.0-5.el9.src.rpm">
          <filename>wavpack-devel-5.4.0-5.el9.s390x.rpm</filename>
          <sum type="sha256">b6e70fb97afa6c00006053707a8c2039baa1c09796be68821ef02567e7e14b28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8151</id>
    <title>Moderate: poppler security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:55:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security and bug fix update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8151" id="RHSA-2022:8151" type="rhsa" title="RHSA-2022:8151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27337" id="CVE-2022-27337" type="cve" title="CVE-2022-27337"/>
      <reference href="https://bugzilla.redhat.com/2087190" id="2087190" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8151.html" id="ALSA-2022:8151" type="self" title="ALSA-2022:8151"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="poppler-devel" version="21.01.0" release="13.el9" epoch="0" arch="s390x" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-devel-21.01.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">5009d963b982b3c7eeb2d88a687757726a63106faf3ee1737597ef9d477bd167</sum>
        </package>
        <package name="poppler-cpp-devel" version="21.01.0" release="13.el9" epoch="0" arch="s390x" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">536c21c8fedb2f4e9e15a568dd174e539e3f997b5b956422f1f46894112d7b35</sum>
        </package>
        <package name="poppler-qt5-devel" version="21.01.0" release="13.el9" epoch="0" arch="s390x" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">85fea71b94f007d0c7f5e240cf25a16a1e489139b0dbbcb0ab262445b2343676</sum>
        </package>
        <package name="poppler-glib-devel" version="21.01.0" release="13.el9" epoch="0" arch="s390x" src="poppler-21.01.0-13.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">f593a2b46dbc151b9f3320f48086c39ac61ca8c2697f05ef266d7b5340c672e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8194</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:47:37"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561)
* libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562)
* libtiff: reachable assertion (CVE-2022-0865)
* libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924)
* libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355)
* libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844)
* libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891)
* tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c (CVE-2022-0908)
* tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)
* libtiff: heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c (CVE-2022-1354)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8194" id="RHSA-2022:8194" type="rhsa" title="RHSA-2022:8194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0561" id="CVE-2022-0561" type="cve" title="CVE-2022-0561"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0562" id="CVE-2022-0562" type="cve" title="CVE-2022-0562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0865" id="CVE-2022-0865" type="cve" title="CVE-2022-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0891" id="CVE-2022-0891" type="cve" title="CVE-2022-0891"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0908" id="CVE-2022-0908" type="cve" title="CVE-2022-0908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0909" id="CVE-2022-0909" type="cve" title="CVE-2022-0909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0924" id="CVE-2022-0924" type="cve" title="CVE-2022-0924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1354" id="CVE-2022-1354" type="cve" title="CVE-2022-1354"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1355" id="CVE-2022-1355" type="cve" title="CVE-2022-1355"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22844" id="CVE-2022-22844" type="cve" title="CVE-2022-22844"/>
      <reference href="https://bugzilla.redhat.com/2042603" id="2042603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054494" id="2054494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054495" id="2054495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064145" id="2064145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064146" id="2064146" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064148" id="2064148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064406" id="2064406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064411" id="2064411" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074404" id="2074404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074415" id="2074415" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8194.html" id="ALSA-2022:8194" type="self" title="ALSA-2022:8194"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="libtiff-tools" version="4.4.0" release="2.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-2.el9.src.rpm">
          <filename>libtiff-tools-4.4.0-2.el9.s390x.rpm</filename>
          <sum type="sha256">0da0c47e9c61c8184b2b50d30593441ed8f22e6b5b1aea7a3a18a0aca46a7e2c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8207</id>
    <title>Low: openjpeg2 security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:39:06"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openjpeg2 security update</summary>
    <description>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer (CVE-2022-1122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8207" id="RHSA-2022:8207" type="rhsa" title="RHSA-2022:8207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1122" id="CVE-2022-1122" type="cve" title="CVE-2022-1122"/>
      <reference href="https://bugzilla.redhat.com/2067052" id="2067052" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8207.html" id="ALSA-2022:8207" type="self" title="ALSA-2022:8207"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="openjpeg2-tools" version="2.4.0" release="7.el9" epoch="0" arch="s390x" src="openjpeg2-2.4.0-7.el9.src.rpm">
          <filename>openjpeg2-tools-2.4.0-7.el9.s390x.rpm</filename>
          <sum type="sha256">1ca8474cd2ebf6be846b439abeaa66b50b72346bdfaaa94f306af196679da7a8</sum>
        </package>
        <package name="openjpeg2-devel" version="2.4.0" release="7.el9" epoch="0" arch="s390x" src="openjpeg2-2.4.0-7.el9.src.rpm">
          <filename>openjpeg2-devel-2.4.0-7.el9.s390x.rpm</filename>
          <sum type="sha256">6a0d56d32fdeb77caf988288fc14e677f404bff0def2c33ad0adf35e2338aa44</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8208</id>
    <title>Moderate: dovecot security and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 03:32:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security and enhancement update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8208" id="RHSA-2022:8208" type="rhsa" title="RHSA-2022:8208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30550" id="CVE-2022-30550" type="cve" title="CVE-2022-30550"/>
      <reference href="https://bugzilla.redhat.com/2105070" id="2105070" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8208.html" id="ALSA-2022:8208" type="self" title="ALSA-2022:8208"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="dovecot-devel" version="2.3.16" release="7.el9" epoch="1" arch="s390x" src="dovecot-2.3.16-7.el9.src.rpm">
          <filename>dovecot-devel-2.3.16-7.el9.s390x.rpm</filename>
          <sum type="sha256">251346e866ce0bf76791c73676f7aca9d0a81a502e1775e127066bbe929d20d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8221</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 01:36:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)
* xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8221" id="RHSA-2022:8221" type="rhsa" title="RHSA-2022:8221"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2319" id="CVE-2022-2319" type="cve" title="CVE-2022-2319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2320" id="CVE-2022-2320" type="cve" title="CVE-2022-2320"/>
      <reference href="https://bugzilla.redhat.com/2106671" id="2106671" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106683" id="2106683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8221.html" id="ALSA-2022:8221" type="self" title="ALSA-2022:8221"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="11.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-11.el9.s390x.rpm</filename>
          <sum type="sha256">34fac8cb6c77d769cc34faf19ba1ab0582158eddae579514cff223e812bcef13</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="11.el9" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-11.el9.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-11.el9.noarch.rpm</filename>
          <sum type="sha256">4e2b11caa9b1ede84bff1d50b6074841cd4ea148cfa780ae8267b2a485e75219</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8252</id>
    <title>Moderate: yajl security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 15:48:03"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8252" id="RHSA-2022:8252" type="rhsa" title="RHSA-2022:8252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24795" id="CVE-2022-24795" type="cve" title="CVE-2022-24795"/>
      <reference href="https://bugzilla.redhat.com/2072912" id="2072912" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8252.html" id="ALSA-2022:8252" type="self" title="ALSA-2022:8252"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="yajl-devel" version="2.1.0" release="21.el9" epoch="0" arch="s390x" src="yajl-2.1.0-21.el9.src.rpm">
          <filename>yajl-devel-2.1.0-21.el9.s390x.rpm</filename>
          <sum type="sha256">4824643d9d415ef368b5a9501ade5510dd10223c8248793d2af79650a2072e25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8267</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 00:56:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516)
* use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640)
* smb2_ioctl_query_info NULL pointer dereference (CVE-2022-0168)
* NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617)
* swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854)
* uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016)
* race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048)
* use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184)
* concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (CVE-2022-1280)
* kernel info leak issue in pfkey_register (CVE-2022-1353)
* use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679)
* NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852)
* fanotify misuses fd_install() which could lead to use-after-free (CVE-2022-1998)
* nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586)
* integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)
* slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368)
* incomplete clean-up of multi-core shared buffers (aka SBDR) (CVE-2022-21123)
* incomplete clean-up of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125)
* incomplete clean-up in specific special register write operations (aka DRPW) (CVE-2022-21166)
* possible to use the debugger to write zero into a location of choice (CVE-2022-21499)
* AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900)
* AMD: Branch Type Confusion (non-retbleed) (CVE-2022-23825)
* Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)
* double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390)
* use after free in SUNRPC subsystem (CVE-2022-28893)
* use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581)
* Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)
* DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946)
* nf_tables disallow binding to already bound chain (CVE-2022-39190)
* nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8267" id="RHSA-2022:8267" type="rhsa" title="RHSA-2022:8267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36516" id="CVE-2020-36516" type="cve" title="CVE-2020-36516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3640" id="CVE-2021-3640" type="cve" title="CVE-2021-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0168" id="CVE-2022-0168" type="cve" title="CVE-2022-0168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0617" id="CVE-2022-0617" type="cve" title="CVE-2022-0617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0854" id="CVE-2022-0854" type="cve" title="CVE-2022-0854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1016" id="CVE-2022-1016" type="cve" title="CVE-2022-1016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1048" id="CVE-2022-1048" type="cve" title="CVE-2022-1048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1184" id="CVE-2022-1184" type="cve" title="CVE-2022-1184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1280" id="CVE-2022-1280" type="cve" title="CVE-2022-1280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1353" id="CVE-2022-1353" type="cve" title="CVE-2022-1353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1679" id="CVE-2022-1679" type="cve" title="CVE-2022-1679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1852" id="CVE-2022-1852" type="cve" title="CVE-2022-1852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1998" id="CVE-2022-1998" type="cve" title="CVE-2022-1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20368" id="CVE-2022-20368" type="cve" title="CVE-2022-20368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21123" id="CVE-2022-21123" type="cve" title="CVE-2022-21123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21125" id="CVE-2022-21125" type="cve" title="CVE-2022-21125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21166" id="CVE-2022-21166" type="cve" title="CVE-2022-21166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21499" id="CVE-2022-21499" type="cve" title="CVE-2022-21499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23816" id="CVE-2022-23816" type="cve" title="CVE-2022-23816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23825" id="CVE-2022-23825" type="cve" title="CVE-2022-23825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24448" id="CVE-2022-24448" type="cve" title="CVE-2022-24448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2586" id="CVE-2022-2586" type="cve" title="CVE-2022-2586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26373" id="CVE-2022-26373" type="cve" title="CVE-2022-26373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2639" id="CVE-2022-2639" type="cve" title="CVE-2022-2639"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28390" id="CVE-2022-28390" type="cve" title="CVE-2022-28390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28893" id="CVE-2022-28893" type="cve" title="CVE-2022-28893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29581" id="CVE-2022-29581" type="cve" title="CVE-2022-29581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29900" id="CVE-2022-29900" type="cve" title="CVE-2022-29900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29901" id="CVE-2022-29901" type="cve" title="CVE-2022-29901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36946" id="CVE-2022-36946" type="cve" title="CVE-2022-36946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39190" id="CVE-2022-39190" type="cve" title="CVE-2022-39190"/>
      <reference href="https://bugzilla.redhat.com/1980646" id="1980646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2037386" id="2037386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2051444" id="2051444" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2052312" id="2052312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2053632" id="2053632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2058395" id="2058395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2059928" id="2059928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066614" id="2066614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066706" id="2066706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066819" id="2066819" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070205" id="2070205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2071022" id="2071022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073064" id="2073064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074208" id="2074208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084125" id="2084125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084183" id="2084183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084479" id="2084479" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2088021" id="2088021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089815" id="2089815" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090226" id="2090226" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090237" id="2090237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090240" id="2090240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090241" id="2090241" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103148" id="2103148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103153" id="2103153" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114878" id="2114878" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115065" id="2115065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115278" id="2115278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123695" id="2123695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2129152" id="2129152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8267.html" id="ALSA-2022:8267" type="self" title="ALSA-2022:8267"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="162.6.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.6.1.el9_1.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.6.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">2b1012c20c47a93d6706b776ca85fa8825dd85ab9f20060ae197abf14be47af0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8317</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 23:54:45"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.16.4). (BZ#2077487)

Security Fix(es):

* samba: server memory information leak via SMB1 (CVE-2022-32742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8317" id="RHSA-2022:8317" type="rhsa" title="RHSA-2022:8317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32742" id="CVE-2022-32742" type="cve" title="CVE-2022-32742"/>
      <reference href="https://bugzilla.redhat.com/2108196" id="2108196" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8317.html" id="ALSA-2022:8317" type="self" title="ALSA-2022:8317"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="libsmbclient-devel" version="4.16.4" release="101.el9" epoch="0" arch="s390x" src="samba-4.16.4-101.el9.src.rpm">
          <filename>libsmbclient-devel-4.16.4-101.el9.s390x.rpm</filename>
          <sum type="sha256">2c77b30b0b41f957133f21e43f1f1c8dfcf425885de9096b715618914a5b003d</sum>
        </package>
        <package name="libwbclient-devel" version="4.16.4" release="101.el9" epoch="0" arch="s390x" src="samba-4.16.4-101.el9.src.rpm">
          <filename>libwbclient-devel-4.16.4-101.el9.s390x.rpm</filename>
          <sum type="sha256">5564f68e346c2f546b671e982666e2c67c3c77536b2841a7955b8eb6863fd6fc</sum>
        </package>
        <package name="samba-devel" version="4.16.4" release="101.el9" epoch="0" arch="s390x" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-devel-4.16.4-101.el9.s390x.rpm</filename>
          <sum type="sha256">5831406e05e1ac9878eb38f0e8a53134e70eb5935b473d13d7f5a4b3625ea168</sum>
        </package>
        <package name="samba-test-libs" version="4.16.4" release="101.el9" epoch="0" arch="s390x" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-test-libs-4.16.4-101.el9.s390x.rpm</filename>
          <sum type="sha256">9110e4dff11245f6fe6a84ce45299a8f2a0fd3bc39c278cd1a4793efbca2d3f0</sum>
        </package>
        <package name="samba-test" version="4.16.4" release="101.el9" epoch="0" arch="s390x" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-test-4.16.4-101.el9.s390x.rpm</filename>
          <sum type="sha256">b6bfe8e8f604221201e7156d84ee0f5fe8195bf43772f0295c5ac234b03328bf</sum>
        </package>
        <package name="samba-pidl" version="4.16.4" release="101.el9" epoch="0" arch="noarch" src="samba-4.16.4-101.el9.src.rpm">
          <filename>samba-pidl-4.16.4-101.el9.noarch.rpm</filename>
          <sum type="sha256">ce4265a141b1855237a79ba6d86e8df379190f78d7ff3073272640f269cc5889</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8318</id>
    <title>Moderate: libldb security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 23:42:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libldb security, bug fix, and enhancement update</summary>
    <description>The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.

The following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077490)

Security Fix(es):

* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8318" id="RHSA-2022:8318" type="rhsa" title="RHSA-2022:8318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32746" id="CVE-2022-32746" type="cve" title="CVE-2022-32746"/>
      <reference href="https://bugzilla.redhat.com/2108215" id="2108215" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8318.html" id="ALSA-2022:8318" type="self" title="ALSA-2022:8318"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="libldb-devel" version="2.5.2" release="1.el9" epoch="0" arch="s390x" src="libldb-2.5.2-1.el9.src.rpm">
          <filename>libldb-devel-2.5.2-1.el9.s390x.rpm</filename>
          <sum type="sha256">751ce6d17bbb85c3ee396d4c36ba09e83a8c2c264e3e0feab868bbae601c5969</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8353</id>
    <title>Moderate: python3.9 security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 22:22:06"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security, bug fix, and enhancement update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.9 (3.9.14). (BZ#2128249)

Security Fix(es):

* python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107)
* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8353" id="RHSA-2022:8353" type="rhsa" title="RHSA-2022:8353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861"/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120642" id="2120642" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8353.html" id="ALSA-2022:8353" type="self" title="ALSA-2022:8353"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="python3-idle" version="3.9.14" release="1.el9" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9.src.rpm">
          <filename>python3-idle-3.9.14-1.el9.s390x.rpm</filename>
          <sum type="sha256">3326a93ca40d6330dac1f77eb394cc77f3f8ccd1e93d88a669c59ef4f8078a5f</sum>
        </package>
        <package name="python3-debug" version="3.9.14" release="1.el9" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9.src.rpm">
          <filename>python3-debug-3.9.14-1.el9.s390x.rpm</filename>
          <sum type="sha256">9602be96a929440eeb2cc4fe5f6461779b911e4e142316bec4a45d4278b3e0f2</sum>
        </package>
        <package name="python3-test" version="3.9.14" release="1.el9" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9.src.rpm">
          <filename>python3-test-3.9.14-1.el9.s390x.rpm</filename>
          <sum type="sha256">a2251ac76a5884e4ea3e096df4ff7b2fc4ecf3b98a373e3269dc8f062f46c191</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8400</id>
    <title>Moderate: libtirpc security update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 21:06:32"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtirpc security update</summary>
    <description>The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call (TI-RPC) documentation, which includes a library required by programs in the nfs-utils and rpcbind packages.

Security Fix(es):

* libtirpc: DoS vulnerability with lots of connections (CVE-2021-46828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8400" id="RHSA-2022:8400" type="rhsa" title="RHSA-2022:8400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46828" id="CVE-2021-46828" type="cve" title="CVE-2021-46828"/>
      <reference href="https://bugzilla.redhat.com/2109352" id="2109352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8400.html" id="ALSA-2022:8400" type="self" title="ALSA-2022:8400"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="libtirpc-devel" version="1.3.3" release="0.el9" epoch="0" arch="s390x" src="libtirpc-1.3.3-0.el9.src.rpm">
          <filename>libtirpc-devel-1.3.3-0.el9.s390x.rpm</filename>
          <sum type="sha256">8a704d707d71135b784d3d34394bf3d74914ecb097ec49e7fbeb7631525ba93d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8415</id>
    <title>Low: mingw-gcc security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 21:02:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>mingw-gcc security and bug fix update</summary>
    <description>The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.

Security Fix(es):

* gcc: uncontrolled recursion in libiberty/rust-demangle.c (CVE-2021-46195)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8415" id="RHSA-2022:8415" type="rhsa" title="RHSA-2022:8415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46195" id="CVE-2021-46195" type="cve" title="CVE-2021-46195"/>
      <reference href="https://bugzilla.redhat.com/2046300" id="2046300" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8415.html" id="ALSA-2022:8415" type="self" title="ALSA-2022:8415"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="mingw64-gcc-c++" version="12.0.1" release="11.2.el9" epoch="0" arch="s390x" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw64-gcc-c++-12.0.1-11.2.el9.s390x.rpm</filename>
          <sum type="sha256">1a31dbd10c739c628696768522758a033b90459a1715f635f40b29011180b1d3</sum>
        </package>
        <package name="mingw32-libgcc" version="12.0.1" release="11.2.el9" epoch="0" arch="s390x" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw32-libgcc-12.0.1-11.2.el9.s390x.rpm</filename>
          <sum type="sha256">1d814822384fd3480c40870f2522d45a334560fc4c7b159cac096b21efff935d</sum>
        </package>
        <package name="mingw32-gcc-c++" version="12.0.1" release="11.2.el9" epoch="0" arch="s390x" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw32-gcc-c++-12.0.1-11.2.el9.s390x.rpm</filename>
          <sum type="sha256">726c0d0f3f5ec19215e388be5e5e6bb906e726fe71983bb5745be043a06885bd</sum>
        </package>
        <package name="mingw32-gcc" version="12.0.1" release="11.2.el9" epoch="0" arch="s390x" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw32-gcc-12.0.1-11.2.el9.s390x.rpm</filename>
          <sum type="sha256">8028e63f99cef272469e64536f2144ad4eb017cdce5b97930f31774c8f4f840c</sum>
        </package>
        <package name="mingw64-libgcc" version="12.0.1" release="11.2.el9" epoch="0" arch="s390x" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw64-libgcc-12.0.1-11.2.el9.s390x.rpm</filename>
          <sum type="sha256">a78139b04d1534bbb1d480a7e5313b21c5705328dc15d507337d5a5c4348344b</sum>
        </package>
        <package name="mingw64-gcc" version="12.0.1" release="11.2.el9" epoch="0" arch="s390x" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw64-gcc-12.0.1-11.2.el9.s390x.rpm</filename>
          <sum type="sha256">c9222b3d64f4bc485820d5eb0cd66dfe155b58fdde9ebbd9d48e27818eb5f38a</sum>
        </package>
        <package name="mingw32-cpp" version="12.0.1" release="11.2.el9" epoch="0" arch="s390x" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw32-cpp-12.0.1-11.2.el9.s390x.rpm</filename>
          <sum type="sha256">d1864f4d6fb4fe34c8f4f7dbb65fc7dbfae95cd0c3455751c5a345e740ac7dad</sum>
        </package>
        <package name="mingw64-cpp" version="12.0.1" release="11.2.el9" epoch="0" arch="s390x" src="mingw-gcc-12.0.1-11.2.el9.src.rpm">
          <filename>mingw64-cpp-12.0.1-11.2.el9.s390x.rpm</filename>
          <sum type="sha256">f005c57c69786375e9a124dbe6ff038e0c93574694b9315165b93c8d47dd0d38</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8434</id>
    <title>Moderate: dotnet7.0 security, bug fix, and enhancement update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-17 13:06:34"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.100 RC 2 and .NET Runtime 7.0.0 RC 2. 

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.100). (BZ#2134641)

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8434" id="RHSA-2022:8434" type="rhsa" title="RHSA-2022:8434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8434.html" id="ALSA-2022:8434" type="self" title="ALSA-2022:8434"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.100" release="0.5.rc2.el9_1" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.5.rc2.el9_1.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.100-0.5.rc2.el9_1.s390x.rpm</filename>
          <sum type="sha256">00b413df750effead8238028e61050f5fbc8034b92d4b548ca2b42887b0e511a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8493</id>
    <title>Important: python3.9 security update</title>
    <issued date="2022-11-16 00:00:00"/>
    <updated date="2022-11-17 11:27:58"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: local privilege escalation via the multiprocessing forkserver start method (CVE-2022-42919)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8493" id="RHSA-2022:8493" type="rhsa" title="RHSA-2022:8493"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42919" id="CVE-2022-42919" type="cve" title="CVE-2022-42919"/>
      <reference href="https://bugzilla.redhat.com/2138705" id="2138705" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8493.html" id="ALSA-2022:8493" type="self" title="ALSA-2022:8493"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="python3-test" version="3.9.14" release="1.el9_1.1" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-test-3.9.14-1.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">64dbafaf8f128eee5cb62bee05ed2bfbd662baff703ff0cc0276a90973289b82</sum>
        </package>
        <package name="python3-idle" version="3.9.14" release="1.el9_1.1" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-idle-3.9.14-1.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">be09101675aea97c77076380ecfaee93f8424b9d63c157ab18b9150cb024e63d</sum>
        </package>
        <package name="python3-debug" version="3.9.14" release="1.el9_1.1" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9_1.1.src.rpm">
          <filename>python3-debug-3.9.14-1.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">d4841607a75bdb97f15ff9d9e7603aa8e1fd6896c6bdec6474fd95aa6213dbcc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:8643</id>
    <title>Important: varnish security update</title>
    <issued date="2022-11-28 00:00:00"/>
    <updated date="2022-12-05 10:44:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: Request Forgery Vulnerability (CVE-2022-45060)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:8643" id="RHSA-2022:8643" type="rhsa" title="RHSA-2022:8643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45060" id="CVE-2022-45060" type="cve" title="CVE-2022-45060"/>
      <reference href="https://bugzilla.redhat.com/2141844" id="2141844" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-8643.html" id="ALSA-2022:8643" type="self" title="ALSA-2022:8643"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="varnish-devel" version="6.6.2" release="2.el9_1.1" epoch="0" arch="s390x" src="varnish-6.6.2-2.el9_1.1.src.rpm">
          <filename>varnish-devel-6.6.2-2.el9_1.1.s390x.rpm</filename>
          <sum type="sha256">085c10efb72c94d794df0afd2eae9375e042b6d50a154e9a1bdfee603517fb33</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0077</id>
    <title>Moderate: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-01-11 00:00:00"/>
    <updated date="2023-01-12 19:37:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.113 and .NET Runtime 6.0.13.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.113). (BZ#2154459)

Security Fix(es):

* dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process (CVE-2023-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0077" id="RHSA-2023:0077" type="rhsa" title="RHSA-2023:0077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21538" id="CVE-2023-21538" type="cve" title="CVE-2023-21538"/>
      <reference href="https://bugzilla.redhat.com/2158342" id="2158342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0077.html" id="ALSA-2023:0077" type="self" title="ALSA-2023:0077"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.113" release="1.el9_1" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el9_1.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.113-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">b17f55a9a53b6e8b23e2a74ea58cab8f53307ec0061d3e6028c8f5762540a45d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0194</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database.  This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147476)
* Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [almalinux-9] (BZ#2153097)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0194" id="RHSA-2023:0194" type="rhsa" title="RHSA-2023:0194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0194.html" id="ALSA-2023:0194" type="self" title="ALSA-2023:0194"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">3049bea39371d987af0402df32b051b6373dc5f273b28effe5957fd6f50a43cd</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">4a82b3e5228294b096b42b96e6cd3c7cc852827f646caaf01af25ee2841f9e28</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">69a3f9e5644b3eb063977baaf69470861f7e4d5902ffe3b43aa59e22f02fc715</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">6a2b3ef250ef7e45f2f7ce41e46c294872d512875d7c0488adcb4022f3f9745c</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">862c093520d2a016bb57ecd6cabc497c9baede943a826494dcbf7dc9d89e8441</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">c2aebe314f5b12794e37fdb38765e941e67301db1ab4fb44c68c24cbc3dba79b</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.6.0.10" release="3.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.6.0.10-3.el9_1.s390x.rpm</filename>
          <sum type="sha256">f31f0274c262323a757a4923d453d9cb961ea01babad920a25eda79eaa4cd5e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0202</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-01-18 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [almalinux-9] (BZ#2157798)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0202" id="RHSA-2023:0202" type="rhsa" title="RHSA-2023:0202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0202.html" id="ALSA-2023:0202" type="self" title="ALSA-2023:0202"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="java-11-openjdk-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">187c0d95137e5e34cfaeb4e94c12b1f39c3cdb277ba9de0767d534e31924163c</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">1ec558e98e3b1a610941f1b96a2ef2309b230cc727bb399589fff4f3e973b7b1</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">21a24ff6f9b7dc0cae58495d8afacb93d35c76b055422e72b0a1136b69d7bc00</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">8558e4ccaf415962aeabed30593addc76efcaf3ee6699dbb4140fb85427fbf33</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">bdcdc4cf2f81765f4dabcd385a222be4d2f8c1cd0eda9cef8c75721c7f7d30d6</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">e8353c04693859780d9cf79848c264b8eabc79d77a2e68d0064231d65e6ad5fb</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.18.0.10" release="2.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.18.0.10-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">f5489f2a0989829217297c407627324a94b963e4b01d25975dc7180b295ef416</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0302</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 11:36:43"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
* libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)
* libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)
* libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)
* libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0302" id="RHSA-2023:0302" type="rhsa" title="RHSA-2023:0302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2056" id="CVE-2022-2056" type="cve" title="CVE-2022-2056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2057" id="CVE-2022-2057" type="cve" title="CVE-2022-2057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2058" id="CVE-2022-2058" type="cve" title="CVE-2022-2058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2519" id="CVE-2022-2519" type="cve" title="CVE-2022-2519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2520" id="CVE-2022-2520" type="cve" title="CVE-2022-2520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2521" id="CVE-2022-2521" type="cve" title="CVE-2022-2521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2953" id="CVE-2022-2953" type="cve" title="CVE-2022-2953"/>
      <reference href="https://bugzilla.redhat.com/2103222" id="2103222" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122789" id="2122789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122792" id="2122792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122799" id="2122799" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134432" id="2134432" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0302.html" id="ALSA-2023:0302" type="self" title="ALSA-2023:0302"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="libtiff-tools" version="4.4.0" release="5.el9_1" epoch="0" arch="s390x" src="libtiff-4.4.0-5.el9_1.src.rpm">
          <filename>libtiff-tools-4.4.0-5.el9_1.s390x.rpm</filename>
          <sum type="sha256">d3026e526a0afcf1c5291c20a4de6b1b176913b8a7cccfa0a205a1c9a3ad02d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0334</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 16:35:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)
* kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)
* kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)
* kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)
* kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077)
* kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Intel 9.2: Important iavf bug fixes (BZ#2127884)
* vfio zero page mappings fail after 2M instances (BZ#2128514)
* nvme-tcp automatic reconnect fails intermittently during EMC powerstore NDU operation (BZ#2131359)
* ice: Driver Update to 5.19 (BZ#2132070)
* WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134588)
* drm: duplicated call of drm_privacy_screen_register_notifier() in drm_connector_register() (BZ#2134619)
* updating the appid field through sysfs is returning an -EINVAL error (BZ#2136914)
* DELL EMC: System is not booting into RT Kernel with perc12. (BZ#2139213)
* No signal showed in the VGA monitor when installing AlmaLinux9 in the legacy bios mode (BZ#2140153)
* Practically limit "Dummy wait" workaround to old Intel systems (BZ#2142168)
* ppc64le: unexpected oom panic when there's enough memory left in zswap test (BZ#2143976)
* fatal error: error in backend: Branch target out of insn range (BZ#2144902)
* AMdCLIENT: The kernel command line parameter "nomodeset" not working properly (BZ#2145217)
* Azure: PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (BZ#2150910)
* Azure z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning (BZ#2151605)
* DELL 9.0 RT - On PE R760 system, call traces are observed dmesg when system is running stress (BZ#2154407)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0334" id="RHSA-2023:0334" type="rhsa" title="RHSA-2023:0334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2959" id="CVE-2022-2959" type="cve" title="CVE-2022-2959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2964" id="CVE-2022-2964" type="cve" title="CVE-2022-2964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3077" id="CVE-2022-3077" type="cve" title="CVE-2022-3077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4139" id="CVE-2022-4139" type="cve" title="CVE-2022-4139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43945" id="CVE-2022-43945" type="cve" title="CVE-2022-43945"/>
      <reference href="https://bugzilla.redhat.com/2067482" id="2067482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2085300" id="2085300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103681" id="2103681" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123309" id="2123309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2141752" id="2141752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147572" id="2147572" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0334.html" id="ALSA-2023:0334" type="self" title="ALSA-2023:0334"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="162.12.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.12.1.el9_1.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.12.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">e80267adf52714b64a398ff3c3aed44fd33662b8347f78286f42149657ea141f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0340</id>
    <title>Moderate: bash security update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 10:46:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bash security update</summary>
    <description>The bash packages provide Bash (Bourne-again shell), which is the default shell for AlmaLinux.

Security Fix(es):

* bash: a heap-buffer-overflow in valid_parameter_transform (CVE-2022-3715)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0340" id="RHSA-2023:0340" type="rhsa" title="RHSA-2023:0340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3715" id="CVE-2022-3715" type="cve" title="CVE-2022-3715"/>
      <reference href="https://bugzilla.redhat.com/2126720" id="2126720" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0340.html" id="ALSA-2023:0340" type="self" title="ALSA-2023:0340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="bash-devel" version="5.1.8" release="6.el9_1" epoch="0" arch="s390x" src="bash-5.1.8-6.el9_1.src.rpm">
          <filename>bash-devel-5.1.8-6.el9_1.s390x.rpm</filename>
          <sum type="sha256">926dc567387ac21ac99bf47976c9194fa8f90e467b47a4f1a99b16fae892ecaa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0626</id>
    <title>Important: libksba security update</title>
    <issued date="2023-02-07 00:00:00"/>
    <updated date="2023-02-09 16:00:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow to code executiona (CVE-2022-47629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0626" id="RHSA-2023:0626" type="rhsa" title="RHSA-2023:0626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47629" id="CVE-2022-47629" type="cve" title="CVE-2022-47629"/>
      <reference href="https://bugzilla.redhat.com/2161571" id="2161571" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0626.html" id="ALSA-2023:0626" type="self" title="ALSA-2023:0626"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="libksba-devel" version="1.5.1" release="6.el9_1" epoch="0" arch="s390x" src="libksba-1.5.1-6.el9_1.src.rpm">
          <filename>libksba-devel-1.5.1-6.el9_1.s390x.rpm</filename>
          <sum type="sha256">6b8e06cc23075389b1f63c52251a9b275138d7a3c6f4cf550c2f50af0c8c1050</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0951</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)
* kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)
* kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack (CVE-2022-4379)
* kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179)
* kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux 9.0: LTP Test failure and crash at fork14 on Sapphire Rapids Platinum 8280+ (BZ#2133083)
* AlmaLinux 9.1 Extending NMI watchdog's timer during LPM (BZ#2140085)
* AMDSERVER 9.1: amdpstate driver incorrectly designed to load as default for Genoa (BZ#2151274)
* qla2xxx NVMe-FC:  WARNING: CPU: 0 PID: 124072 at drivers/scsi/qla2xxx/qla_init.c:70 qla2xxx_rel_done_warning+0x25/0x30 [qla2xxx] (BZ#2152178)
* Regression: Kernel panic on Lenovo T480 with AH40 USB-C docking station (BZ#2153277)
* Scheduler Update (almalinux9.2) (BZ#2153792)
* AlmaLinux9.1, Nx_Gzip: nr_total_credits is not decremented when processing units are reduced by dlpar in shared mode. (FW1030 / DLPAR) (BZ#2154305)
* MSFT, MANA, NET Patch AlmaLinux-9: Fix race on per-CQ variable napi_iperf panic fix (BZ#2155145)
* Azure vPCI AlmaLinux-9 add the support of multi-MSI (BZ#2155459)
* Azure AlmaLinux-9: VM Deployment Failures Patch Request (BZ#2155930)
* The 'date' command shows wrong time in nested KVM s390x guest (BZ#2158815)
* AlmaLinux-9.2: Update NVMe driver to sync with upstream v6.0 (BZ#2161344)
* CEE cephfs: AlmaLinux9 cephfs client crashing with RIP: 0010:netfs_rreq_unlock+0xef/0x380 [netfs] (BZ#2161418)
* block layer: update with upstream v6.0 (BZ#2162535)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0951" id="RHSA-2023:0951" type="rhsa" title="RHSA-2023:0951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2873" id="CVE-2022-2873" type="cve" title="CVE-2022-2873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3564" id="CVE-2022-3564" type="cve" title="CVE-2022-3564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4378" id="CVE-2022-4378" type="cve" title="CVE-2022-4378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4379" id="CVE-2022-4379" type="cve" title="CVE-2022-4379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0179" id="CVE-2023-0179" type="cve" title="CVE-2023-0179"/>
      <reference href="https://bugzilla.redhat.com/2119048" id="2119048" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150999" id="2150999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152548" id="2152548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152807" id="2152807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161713" id="2161713" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0951.html" id="ALSA-2023:0951" type="self" title="ALSA-2023:0951"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="162.18.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.18.1.el9_1.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.18.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">d9f6532c4ca7b586720947763789cf17f6de2731524ea6b6d7d93f4f163e00bf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0953</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 17:45:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0953" id="RHSA-2023:0953" type="rhsa" title="RHSA-2023:0953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0953.html" id="ALSA-2023:0953" type="self" title="ALSA-2023:0953"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="python3-idle" version="3.9.14" release="1.el9_1.2" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-idle-3.9.14-1.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">3626f537bea5f08a04ea7453d82d2433f8c75f9a25fe95234fee5d5fc7b9330f</sum>
        </package>
        <package name="python3-debug" version="3.9.14" release="1.el9_1.2" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-debug-3.9.14-1.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">98af390e5523e68f2288e8b22884c7237cd53769cf39bcf7c991aeb4fd29ad50</sum>
        </package>
        <package name="python3-test" version="3.9.14" release="1.el9_1.2" epoch="0" arch="s390x" src="python3.9-3.9.14-1.el9_1.2.src.rpm">
          <filename>python3-test-3.9.14-1.el9_1.2.s390x.rpm</filename>
          <sum type="sha256">c81c96acd37fa86d66468ddd20703bc2624bd9f36b8eab83aa4acee2825a27e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0957</id>
    <title>Moderate: lua security update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 18:03:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>lua security update</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: use after free allows Sandbox Escape (CVE-2021-44964)
* lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (CVE-2021-43519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0957" id="RHSA-2023:0957" type="rhsa" title="RHSA-2023:0957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-43519" id="CVE-2021-43519" type="cve" title="CVE-2021-43519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44964" id="CVE-2021-44964" type="cve" title="CVE-2021-44964"/>
      <reference href="https://bugzilla.redhat.com/2047672" id="2047672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064772" id="2064772" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0957.html" id="ALSA-2023:0957" type="self" title="ALSA-2023:0957"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="lua-devel" version="5.4.4" release="2.el9_1" epoch="0" arch="s390x" src="lua-5.4.4-2.el9_1.src.rpm">
          <filename>lua-devel-5.4.4-2.el9_1.s390x.rpm</filename>
          <sum type="sha256">c6aac2924d189ae1683780d573383cb1c82d81569194447c7959f861693b60e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1068</id>
    <title>Moderate: libjpeg-turbo security update</title>
    <issued date="2023-03-06 00:00:00"/>
    <updated date="2023-03-06 21:05:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libjpeg-turbo security update</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c (CVE-2021-46822)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1068" id="RHSA-2023:1068" type="rhsa" title="RHSA-2023:1068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46822" id="CVE-2021-46822" type="cve" title="CVE-2021-46822"/>
      <reference href="https://bugzilla.redhat.com/2100044" id="2100044" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1068.html" id="ALSA-2023:1068" type="self" title="ALSA-2023:1068"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="turbojpeg-devel" version="2.0.90" release="6.el9_1" epoch="0" arch="s390x" src="libjpeg-turbo-2.0.90-6.el9_1.src.rpm">
          <filename>turbojpeg-devel-2.0.90-6.el9_1.s390x.rpm</filename>
          <sum type="sha256">21c9c3f85b81aac2c211f45cd9ca2817778e686b5338e470a5a5c6eb559c3619</sum>
        </package>
        <package name="turbojpeg" version="2.0.90" release="6.el9_1" epoch="0" arch="s390x" src="libjpeg-turbo-2.0.90-6.el9_1.src.rpm">
          <filename>turbojpeg-2.0.90-6.el9_1.s390x.rpm</filename>
          <sum type="sha256">a86ac5f48d3db0b8b6b0dc16b75535577c44dcda706e515d720df6eb13dc2ed3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1470</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-03-27 00:00:00"/>
    <updated date="2023-03-27 21:59:19"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)
* ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266)
* kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux9.0 - zfcp: fix missing auto port scan and thus missing target ports (BZ#2127880)
* Cgroups_v2, when creating new cgroup/container, resets the cpu affinity masks for all usr processes on the system. (BZ#2143766)
* AlmaLinux9.0 - boot: Add secure boot trailer (BZ#2151528)
* kernel-rt-debug: WARNING: possible circular locking dependency detected (&amp;n-&gt;list_lock-&gt;&amp;p-&gt;pi_lock-&gt;&amp;lock-&gt;wait_lock) (BZ#2160614)
* Support cpuset.sched_load_balance by changing default CPUset directory structure (BZ#2161105)
* AlmaLinux9.0 -  s390/kexec: fix ipl report address for kdump (BZ#2166903)
* libgpiod doesn't seem to work with Interphase gpiochip (BZ#2166956)
* Azure AlmaLinux9 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (BZ#2170227)

Enhancement(s):

* IBM 9.2 FEAT: Upgrade the QETH driver to latest from upstream, e.g. kernel 6.0 (BZ#2166304)
* Intel 9.2 FEAT SPR CPU: AMX: Improve the init_fpstate setup code (BZ#2168382)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1470" id="RHSA-2023:1470" type="rhsa" title="RHSA-2023:1470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4269" id="CVE-2022-4269" type="cve" title="CVE-2022-4269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4744" id="CVE-2022-4744" type="cve" title="CVE-2022-4744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0266" id="CVE-2023-0266" type="cve" title="CVE-2023-0266"/>
      <reference href="https://bugzilla.redhat.com/2150272" id="2150272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156322" id="2156322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163379" id="2163379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1470.html" id="ALSA-2023:1470" type="self" title="ALSA-2023:1470"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="162.22.2.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.22.2.el9_1.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.22.2.el9_1.s390x.rpm</filename>
          <sum type="sha256">f3f472cfb0b5e0c66bfa9d12175d2a34bd96f11e31271e5cea2434f4a5cb4142</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1693</id>
    <title>Moderate: postgresql security update</title>
    <issued date="2023-04-11 00:00:00"/>
    <updated date="2023-04-20 13:52:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Extension scripts replace objects not belonging to the extension. (CVE-2022-2625)
* postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1693" id="RHSA-2023:1693" type="rhsa" title="RHSA-2023:1693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2625" id="CVE-2022-2625" type="cve" title="CVE-2022-2625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41862" id="CVE-2022-41862" type="cve" title="CVE-2022-41862"/>
      <reference href="https://bugzilla.redhat.com/2113825" id="2113825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165722" id="2165722" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1693.html" id="ALSA-2023:1693" type="self" title="ALSA-2023:1693"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="postgresql-static" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-static-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">01f95e19afb84dd24d624539a141bd8b174c924d072fa0486ab76df015a2c6d9</sum>
        </package>
        <package name="postgresql-private-devel" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-private-devel-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">3c6b45567533191e5d7220e15496c9514324116e159208feb5213cd441ed2a1f</sum>
        </package>
        <package name="postgresql-server-devel" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-server-devel-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">8b217114dc0e8d9891d5bdf65a1daf5dd164eb5fb2251b2b6d74cb7dcc97eea1</sum>
        </package>
        <package name="postgresql-docs" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-docs-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">beed4c299246c4406e36056e97ca5a09ca69193e7cfb068bf2927d78861f233b</sum>
        </package>
        <package name="postgresql-test" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-test-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">caddd278e87f45c5e728dd788a0349b2a44cc6c5c8d128ff02344ce54e90f75f</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.10" release="1.el9_1" epoch="0" arch="s390x" src="postgresql-13.10-1.el9_1.src.rpm">
          <filename>postgresql-upgrade-devel-13.10-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">dc9f99b0b667f582108807ce6b46294160101cea34a079c13f6e0b12aa9917b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1703</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-04-11 00:00:00"/>
    <updated date="2023-04-20 14:34:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Update intel_idle for Eaglestream/Sapphire Rapids support (BZ#2168361)
* AlmaLinux9: An application stopped on robust futex used via pthread_mutex_lock() (BZ#2168836)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1703" id="RHSA-2023:1703" type="rhsa" title="RHSA-2023:1703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0386" id="CVE-2023-0386" type="cve" title="CVE-2023-0386"/>
      <reference href="https://bugzilla.redhat.com/2159505" id="2159505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1703.html" id="ALSA-2023:1703" type="self" title="ALSA-2023:1703"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="162.23.1.el9_1" epoch="0" arch="s390x" src="kernel-5.14.0-162.23.1.el9_1.src.rpm">
          <filename>kernel-cross-headers-5.14.0-162.23.1.el9_1.s390x.rpm</filename>
          <sum type="sha256">cd1f0abbb411ca881051b8dba9035ba81ac892c9d9623af9a45caf97b73d8fe6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1879</id>
    <title>Important: java-17-openjdk security and bug fix update</title>
    <issued date="2023-04-19 00:00:00"/>
    <updated date="2023-04-20 15:45:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186804)
* Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186811)
* The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186807)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1879" id="RHSA-2023:1879" type="rhsa" title="RHSA-2023:1879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1879.html" id="ALSA-2023:1879" type="self" title="ALSA-2023:1879"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">056c6651f9ce8fc6160af6d250d3c0102ba8aeb9cf3be3b0fc03f0ddc2c6ce30</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">265cf3110a37ed644630313a7017d380d8ddd327e50e9960dfb8d4eb7c370cf6</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">7e2bc4177bc224dc865af4ec21c42b1becf037fde1070d8311ccbe2ac506e602</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">a19440969a5733ec79bfcd88c7c1079858e177a65b48d8ddf40c3bbb01f8d03c</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">b43a5b6950c8287103a6e26e17e587361db218493f7209de648d9534932ff276</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">ec6c257ca078c0128332b7502b2fa958569b25098d058411e111caeeb9ffca3a</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.7.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el9_1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.7.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">f54b573bec4330bfad8ce1a7cd13630fa35790c9c737e84c528b8ebe2496643d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1880</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2023-04-19 00:00:00"/>
    <updated date="2023-04-20 15:55:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1880" id="RHSA-2023:1880" type="rhsa" title="RHSA-2023:1880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1880.html" id="ALSA-2023:1880" type="self" title="ALSA-2023:1880"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">7385ee7eb281d1c4c9999b8e2ef6a20aead1f59ea03b61dca2dd7d4ad1e65da9</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">c81d1599352af504010a1aa7156a2185a050b26121e5615b0da93bca48ac876a</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">d4dd43c5c21edb5d44413174ef8fa25fa4088cd20c2639bc44b2272fc3857b6c</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">d76976631f04ef6d486789fed75b675e3510f5dc4ddecadf09f0518636ec63aa</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">dafd6550eebcebbac067b41dda69a1bedfa936ba570cc79b40562a3c7239bcae</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">df49ebe9170b5178cd05a7cd99d96bf01feb1714b7d3abae67fb05341a411547</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.19.0.7" release="1.el9_1" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el9_1.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.19.0.7-1.el9_1.s390x.rpm</filename>
          <sum type="sha256">f2832db5af04f8eee5275928f1cff2d4dffc13a8547ee26bc22a39acbf79a48d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2127</id>
    <title>Important: samba security update</title>
    <issued date="2023-05-04 00:00:00"/>
    <updated date="2023-05-05 10:51:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2127" id="RHSA-2023:2127" type="rhsa" title="RHSA-2023:2127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38023" id="CVE-2022-38023" type="cve" title="CVE-2022-38023"/>
      <reference href="https://bugzilla.redhat.com/2154362" id="2154362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2127.html" id="ALSA-2023:2127" type="self" title="ALSA-2023:2127"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_1_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_1_default</name>
        <package name="samba-devel" version="4.16.4" release="103.el9_1" epoch="0" arch="s390x" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-devel-4.16.4-103.el9_1.s390x.rpm</filename>
          <sum type="sha256">038ab219d271e2880107106ad113ef861585129e4adca7932d86c7e02d7d0af3</sum>
        </package>
        <package name="samba-test" version="4.16.4" release="103.el9_1" epoch="0" arch="s390x" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-test-4.16.4-103.el9_1.s390x.rpm</filename>
          <sum type="sha256">3c2e1e50c9719607405875ceaa0cd543640c2d7b9b656709de9905eced0414f6</sum>
        </package>
        <package name="libwbclient-devel" version="4.16.4" release="103.el9_1" epoch="0" arch="s390x" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>libwbclient-devel-4.16.4-103.el9_1.s390x.rpm</filename>
          <sum type="sha256">5147a1decb69ecf839db9848d5f0c23f48d6e0e916d42416ed5569295124309c</sum>
        </package>
        <package name="samba-test-libs" version="4.16.4" release="103.el9_1" epoch="0" arch="s390x" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-test-libs-4.16.4-103.el9_1.s390x.rpm</filename>
          <sum type="sha256">643e75954935d471bae50f15774843c772c36c102e6272bb9b06cd1b08fdb8b2</sum>
        </package>
        <package name="libsmbclient-devel" version="4.16.4" release="103.el9_1" epoch="0" arch="s390x" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>libsmbclient-devel-4.16.4-103.el9_1.s390x.rpm</filename>
          <sum type="sha256">aed31e38ebc97d8cf7fd361dc3d06a6e37069047b2eabea4ec57b9846e244f81</sum>
        </package>
        <package name="samba-pidl" version="4.16.4" release="103.el9_1" epoch="0" arch="noarch" src="samba-4.16.4-103.el9_1.src.rpm">
          <filename>samba-pidl-4.16.4-103.el9_1.noarch.rpm</filename>
          <sum type="sha256">c48c0aef3685e93ad6b4c179b446ee741ca10c2e8490e8c61364eac2f8b8440b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2166</id>
    <title>Moderate: freeradius security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 17:13:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeradius security and bug fix update</summary>
    <description>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

* freeradius: Information leakage in EAP-PWD (CVE-2022-41859)
* freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860)
* freeradius: Crash on invalid abinary data (CVE-2022-41861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2166" id="RHSA-2023:2166" type="rhsa" title="RHSA-2023:2166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41859" id="CVE-2022-41859" type="cve" title="CVE-2022-41859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41860" id="CVE-2022-41860" type="cve" title="CVE-2022-41860"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41861" id="CVE-2022-41861" type="cve" title="CVE-2022-41861"/>
      <reference href="https://bugzilla.redhat.com/2078483" id="2078483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078485" id="2078485" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078487" id="2078487" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2166.html" id="ALSA-2023:2166" type="self" title="ALSA-2023:2166"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="freeradius-unixODBC" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-unixODBC-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">1f1d2062c536d82b348677b7b5ac82bdafa957a01b8a7c7b1182aba3bfe46e41</sum>
        </package>
        <package name="freeradius-mysql" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-mysql-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">5cdbc8c289e0bd2c6066e17de36a454e81faedf73bf3ac425760e651cb3a547e</sum>
        </package>
        <package name="freeradius-sqlite" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-sqlite-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">64aa856c521b0826a1bf73ce959fcfac829112d0ba24fcd280206cdbb549507f</sum>
        </package>
        <package name="freeradius-rest" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-rest-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">65e6cd3091d103cebff1760db370f80528273dd5fb153f0839dadf158a578b1f</sum>
        </package>
        <package name="freeradius-postgresql" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-postgresql-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">94675998ef0bc86d7d822a930f81d30eff30eb86873db7eff8f8feff3fe3d7a1</sum>
        </package>
        <package name="freeradius-perl" version="3.0.21" release="37.el9" epoch="0" arch="s390x" src="freeradius-3.0.21-37.el9.src.rpm">
          <filename>freeradius-perl-3.0.21-37.el9.s390x.rpm</filename>
          <sum type="sha256">c4ff652119d13a67202366724e957762450ef2cd27ab57af72cdd649556701ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2248</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 12:19:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550)
* xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)
* xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)
* xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)
* xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)
* xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)
* xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)
* xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)
* xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2248" id="RHSA-2023:2248" type="rhsa" title="RHSA-2023:2248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3550" id="CVE-2022-3550" type="cve" title="CVE-2022-3550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3551" id="CVE-2022-3551" type="cve" title="CVE-2022-3551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4283" id="CVE-2022-4283" type="cve" title="CVE-2022-4283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46340" id="CVE-2022-46340" type="cve" title="CVE-2022-46340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46341" id="CVE-2022-46341" type="cve" title="CVE-2022-46341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46342" id="CVE-2022-46342" type="cve" title="CVE-2022-46342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46343" id="CVE-2022-46343" type="cve" title="CVE-2022-46343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46344" id="CVE-2022-46344" type="cve" title="CVE-2022-46344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0494" id="CVE-2023-0494" type="cve" title="CVE-2023-0494"/>
      <reference href="https://bugzilla.redhat.com/2140698" id="2140698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140701" id="2140701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151755" id="2151755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151756" id="2151756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151757" id="2151757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151758" id="2151758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151760" id="2151760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151761" id="2151761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165995" id="2165995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2248.html" id="ALSA-2023:2248" type="self" title="ALSA-2023:2248"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="17.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-17.el9.s390x.rpm</filename>
          <sum type="sha256">26e0275b06a236967edde0adbdfe9e025f38ee0d007217964d4a58dec2aa50a9</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="17.el9" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-17.el9.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-17.el9.noarch.rpm</filename>
          <sum type="sha256">3b231953962ef28c2c50afd8c6fc428361b8e1316ccbe683f1cfb5c063cd4d87</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2259</id>
    <title>Moderate: poppler security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 08:29:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security and bug fix update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2259" id="RHSA-2023:2259" type="rhsa" title="RHSA-2023:2259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38784" id="CVE-2022-38784" type="cve" title="CVE-2022-38784"/>
      <reference href="https://bugzilla.redhat.com/2124527" id="2124527" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2259.html" id="ALSA-2023:2259" type="self" title="ALSA-2023:2259"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="poppler-qt5-devel" version="21.01.0" release="14.el9" epoch="0" arch="s390x" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-14.el9.s390x.rpm</filename>
          <sum type="sha256">06684dae2b6c5b8eecbdca9106216eebe2bc88d9b42f045892ab9d9862862b34</sum>
        </package>
        <package name="poppler-glib-devel" version="21.01.0" release="14.el9" epoch="0" arch="s390x" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-14.el9.s390x.rpm</filename>
          <sum type="sha256">5ca9f3faacd85e8f7dc179836269e1d319ce413f1ab964bf85b1a80ef892ae47</sum>
        </package>
        <package name="poppler-devel" version="21.01.0" release="14.el9" epoch="0" arch="s390x" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-devel-21.01.0-14.el9.s390x.rpm</filename>
          <sum type="sha256">8d7310a4ee7d923f653274bdf08a21f08dca7e7688203fd013a6d8575a382bf7</sum>
        </package>
        <package name="poppler-cpp-devel" version="21.01.0" release="14.el9" epoch="0" arch="s390x" src="poppler-21.01.0-14.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-14.el9.s390x.rpm</filename>
          <sum type="sha256">b96fd7fa83ef584859396b3a2fe51dbf0e1cb2154ceda91096c4013cd36bf0ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2261</id>
    <title>Moderate: bind security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 07:55:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind security and bug fix update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795)
* bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3736)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3924)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2261" id="RHSA-2023:2261" type="rhsa" title="RHSA-2023:2261"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2795" id="CVE-2022-2795" type="cve" title="CVE-2022-2795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3094" id="CVE-2022-3094" type="cve" title="CVE-2022-3094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3736" id="CVE-2022-3736" type="cve" title="CVE-2022-3736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3924" id="CVE-2022-3924" type="cve" title="CVE-2022-3924"/>
      <reference href="https://bugzilla.redhat.com/2128584" id="2128584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164032" id="2164032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164038" id="2164038" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164039" id="2164039" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2261.html" id="ALSA-2023:2261" type="self" title="ALSA-2023:2261"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="bind-doc" version="9.16.23" release="11.el9" epoch="32" arch="noarch" src="bind-9.16.23-11.el9.src.rpm">
          <filename>bind-doc-9.16.23-11.el9.noarch.rpm</filename>
          <sum type="sha256">89aa2e6a4d42f3636b882c4f0a7b97379335821cf7298757b760024b54a49ca6</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="11.el9" epoch="32" arch="s390x" src="bind-9.16.23-11.el9.src.rpm">
          <filename>bind-devel-9.16.23-11.el9.s390x.rpm</filename>
          <sum type="sha256">9b58a974be4b60e80e131f1ff97f157296b70fb1db1ff47f7b49d01620d457ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2326</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 06:35:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)
* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)
* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)
* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)
* freerdp: division by zero in urbdrc channel (CVE-2022-39318)
* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)
* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)
* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)
* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2326" id="RHSA-2023:2326" type="rhsa" title="RHSA-2023:2326"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39282" id="CVE-2022-39282" type="cve" title="CVE-2022-39282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39283" id="CVE-2022-39283" type="cve" title="CVE-2022-39283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39316" id="CVE-2022-39316" type="cve" title="CVE-2022-39316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39317" id="CVE-2022-39317" type="cve" title="CVE-2022-39317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39318" id="CVE-2022-39318" type="cve" title="CVE-2022-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39319" id="CVE-2022-39319" type="cve" title="CVE-2022-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39320" id="CVE-2022-39320" type="cve" title="CVE-2022-39320"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39347" id="CVE-2022-39347" type="cve" title="CVE-2022-39347"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41877" id="CVE-2022-41877" type="cve" title="CVE-2022-41877"/>
      <reference href="https://bugzilla.redhat.com/2134713" id="2134713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134717" id="2134717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143642" id="2143642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143643" id="2143643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143644" id="2143644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143645" id="2143645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143646" id="2143646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143647" id="2143647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143648" id="2143648" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2326.html" id="ALSA-2023:2326" type="self" title="ALSA-2023:2326"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libwinpr-devel" version="2.4.1" release="5.el9" epoch="2" arch="s390x" src="freerdp-2.4.1-5.el9.src.rpm">
          <filename>libwinpr-devel-2.4.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">a578ca2010f17d7d9bb89ff4560135ce72d6abe41bd34a4fb9c4a2ce19e01eff</sum>
        </package>
        <package name="freerdp-devel" version="2.4.1" release="5.el9" epoch="2" arch="s390x" src="freerdp-2.4.1-5.el9.src.rpm">
          <filename>freerdp-devel-2.4.1-5.el9.s390x.rpm</filename>
          <sum type="sha256">b66b31233d8907e370a4c52f15d48eb8f9afff2b7ad1e47cba5a05b45d67a8bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2340</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 06:12:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap Buffer overflows in tiffcrop.c (CVE-2022-3570)
* libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix (CVE-2022-3597)
* libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c (CVE-2022-3598)
* libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c (CVE-2022-3599)
* libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (CVE-2022-3626)
* libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (CVE-2022-3627)
* libtiff: integer overflow in function TIFFReadRGBATileExt of the file (CVE-2022-3970)
* libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645)
* libtiff: heap buffer overflow issues related to TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2023-30774)
* libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c (CVE-2023-30775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2340" id="RHSA-2023:2340" type="rhsa" title="RHSA-2023:2340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3570" id="CVE-2022-3570" type="cve" title="CVE-2022-3570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3597" id="CVE-2022-3597" type="cve" title="CVE-2022-3597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3598" id="CVE-2022-3598" type="cve" title="CVE-2022-3598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3599" id="CVE-2022-3599" type="cve" title="CVE-2022-3599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3626" id="CVE-2022-3626" type="cve" title="CVE-2022-3626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3627" id="CVE-2022-3627" type="cve" title="CVE-2022-3627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3970" id="CVE-2022-3970" type="cve" title="CVE-2022-3970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4645" id="CVE-2022-4645" type="cve" title="CVE-2022-4645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30774" id="CVE-2023-30774" type="cve" title="CVE-2023-30774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30775" id="CVE-2023-30775" type="cve" title="CVE-2023-30775"/>
      <reference href="https://bugzilla.redhat.com/2142734" id="2142734" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142736" id="2142736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142738" id="2142738" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142740" id="2142740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142741" id="2142741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142742" id="2142742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2148918" id="2148918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2176220" id="2176220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187139" id="2187139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187141" id="2187141" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2340.html" id="ALSA-2023:2340" type="self" title="ALSA-2023:2340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libtiff-tools" version="4.4.0" release="7.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-7.el9.src.rpm">
          <filename>libtiff-tools-4.4.0-7.el9.s390x.rpm</filename>
          <sum type="sha256">fac38976e09b7e688131f7c718c2caf7437b33d044f0d60cc601f36ff88f0660</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2370</id>
    <title>Moderate: unbound security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 05:10:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

Security Fix(es):

* unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack) (CVE-2022-3204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2370" id="RHSA-2023:2370" type="rhsa" title="RHSA-2023:2370"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3204" id="CVE-2022-3204" type="cve" title="CVE-2022-3204"/>
      <reference href="https://bugzilla.redhat.com/2128947" id="2128947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2370.html" id="ALSA-2023:2370" type="self" title="ALSA-2023:2370"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="unbound-devel" version="1.16.2" release="3.el9" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9.src.rpm">
          <filename>unbound-devel-1.16.2-3.el9.s390x.rpm</filename>
          <sum type="sha256">7a7abb4d9452569d7e9ef4f7c2240f0f321faa6d69902a06cc4f9cc120ecb4e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2373</id>
    <title>Moderate: wireshark security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 04:46:03"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security and bug fix update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: f5ethtrailer Infinite loop in legacy style dissector (CVE-2022-3190)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2373" id="RHSA-2023:2373" type="rhsa" title="RHSA-2023:2373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3190" id="CVE-2022-3190" type="cve" title="CVE-2022-3190"/>
      <reference href="https://bugzilla.redhat.com/2152061" id="2152061" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2373.html" id="ALSA-2023:2373" type="self" title="ALSA-2023:2373"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="wireshark-devel" version="3.4.10" release="4.el9" epoch="1" arch="s390x" src="wireshark-3.4.10-4.el9.src.rpm">
          <filename>wireshark-devel-3.4.10-4.el9.s390x.rpm</filename>
          <sum type="sha256">34f1fd77915ca733a8124c6993b8f0e541e5ab29720bb7bcb9ce09ae32cc4877</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2458</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 03:34:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896)
* net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)
* cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341)
* malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655)
* possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462)
* KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789)
* use-after-free in free_pipe_info() could lead to privilege escalation (CVE-2022-1882)
* KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196)
* netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663)
* race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028)
* out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c (CVE-2022-3435)
* race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522)
* memory leak in ipv6_renew_options() (CVE-2022-3524)
* data races around icsk-&gt;icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566)
* data races around sk-&gt;sk_prot (CVE-2022-3567)
* memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619)
* denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623)
* use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625)
* USB-accessible buffer overflow in brcmfmac (CVE-2022-3628)
* use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640)
* Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707)
* mptcp: NULL pointer dereference in subflow traversal at disconnect time (CVE-2022-4128)
* l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129)
* igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141)
* lockdown bypass using IMA (CVE-2022-21505)
* double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (CVE-2022-28388)
* network backend may cause Linux netfront to use freed SKBs (XSA-405) (CVE-2022-33743)
* unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188)
* TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189)
* u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674)
* use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)
* use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720)
* BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721)
* Denial of service in beacon protection for P2P-device (CVE-2022-42722)
* memory corruption in usbmon driver (CVE-2022-43750)
* NULL pointer dereference in traffic control subsystem (CVE-2022-47929)
* NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394)
* use-after-free due to race condition in qdisc_graft() (CVE-2023-0590)
* use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195)
* denial of service in tipc_conn_close (CVE-2023-1382)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2458" id="RHSA-2023:2458" type="rhsa" title="RHSA-2023:2458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-26341" id="CVE-2021-26341" type="cve" title="CVE-2021-26341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33655" id="CVE-2021-33655" type="cve" title="CVE-2021-33655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1462" id="CVE-2022-1462" type="cve" title="CVE-2022-1462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1789" id="CVE-2022-1789" type="cve" title="CVE-2022-1789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1882" id="CVE-2022-1882" type="cve" title="CVE-2022-1882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20141" id="CVE-2022-20141" type="cve" title="CVE-2022-20141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21505" id="CVE-2022-21505" type="cve" title="CVE-2022-21505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2196" id="CVE-2022-2196" type="cve" title="CVE-2022-2196"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2663" id="CVE-2022-2663" type="cve" title="CVE-2022-2663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28388" id="CVE-2022-28388" type="cve" title="CVE-2022-28388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3028" id="CVE-2022-3028" type="cve" title="CVE-2022-3028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33743" id="CVE-2022-33743" type="cve" title="CVE-2022-33743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3435" id="CVE-2022-3435" type="cve" title="CVE-2022-3435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3522" id="CVE-2022-3522" type="cve" title="CVE-2022-3522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3524" id="CVE-2022-3524" type="cve" title="CVE-2022-3524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3566" id="CVE-2022-3566" type="cve" title="CVE-2022-3566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3567" id="CVE-2022-3567" type="cve" title="CVE-2022-3567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3619" id="CVE-2022-3619" type="cve" title="CVE-2022-3619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3623" id="CVE-2022-3623" type="cve" title="CVE-2022-3623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3625" id="CVE-2022-3625" type="cve" title="CVE-2022-3625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3628" id="CVE-2022-3628" type="cve" title="CVE-2022-3628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3640" id="CVE-2022-3640" type="cve" title="CVE-2022-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3707" id="CVE-2022-3707" type="cve" title="CVE-2022-3707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39188" id="CVE-2022-39188" type="cve" title="CVE-2022-39188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39189" id="CVE-2022-39189" type="cve" title="CVE-2022-39189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4128" id="CVE-2022-4128" type="cve" title="CVE-2022-4128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4129" id="CVE-2022-4129" type="cve" title="CVE-2022-4129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41674" id="CVE-2022-41674" type="cve" title="CVE-2022-41674"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42703" id="CVE-2022-42703" type="cve" title="CVE-2022-42703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42720" id="CVE-2022-42720" type="cve" title="CVE-2022-42720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42721" id="CVE-2022-42721" type="cve" title="CVE-2022-42721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42722" id="CVE-2022-42722" type="cve" title="CVE-2022-42722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42896" id="CVE-2022-42896" type="cve" title="CVE-2022-42896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43750" id="CVE-2022-43750" type="cve" title="CVE-2022-43750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47929" id="CVE-2022-47929" type="cve" title="CVE-2022-47929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0394" id="CVE-2023-0394" type="cve" title="CVE-2023-0394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0461" id="CVE-2023-0461" type="cve" title="CVE-2023-0461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0590" id="CVE-2023-0590" type="cve" title="CVE-2023-0590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1195" id="CVE-2023-1195" type="cve" title="CVE-2023-1195"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1382" id="CVE-2023-1382" type="cve" title="CVE-2023-1382"/>
      <reference href="https://bugzilla.redhat.com/2061703" id="2061703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073091" id="2073091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078466" id="2078466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089701" id="2089701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090723" id="2090723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106830" id="2106830" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107924" id="2107924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108691" id="2108691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114937" id="2114937" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122228" id="2122228" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123056" id="2123056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124788" id="2124788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130141" id="2130141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133483" id="2133483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133490" id="2133490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134377" id="2134377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134380" id="2134380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134451" id="2134451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134506" id="2134506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134517" id="2134517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134528" id="2134528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2137979" id="2137979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2139610" id="2139610" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143893" id="2143893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143943" id="2143943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144720" id="2144720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147364" id="2147364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150947" id="2150947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150960" id="2150960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150979" id="2150979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151270" id="2151270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154171" id="2154171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154235" id="2154235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160023" id="2160023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162120" id="2162120" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165721" id="2165721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165741" id="2165741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168246" id="2168246" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2176192" id="2176192" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177371" id="2177371" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2458.html" id="ALSA-2023:2458" type="self" title="ALSA-2023:2458"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="284.11.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.11.1.el9_2.src.rpm">
          <filename>kernel-cross-headers-5.14.0-284.11.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">d0e39c9d1da970a5e59819202390f5f21664c2a90e6ffd95b7972923b02a496f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2459</id>
    <title>Moderate: device-mapper-multipath security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 03:16:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>device-mapper-multipath security and bug fix update</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack (CVE-2022-41973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2459" id="RHSA-2023:2459" type="rhsa" title="RHSA-2023:2459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41973" id="CVE-2022-41973" type="cve" title="CVE-2022-41973"/>
      <reference href="https://bugzilla.redhat.com/2123894" id="2123894" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2459.html" id="ALSA-2023:2459" type="self" title="ALSA-2023:2459"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="device-mapper-multipath-devel" version="0.8.7" release="20.el9" epoch="0" arch="s390x" src="device-mapper-multipath-0.8.7-20.el9.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.7-20.el9.s390x.rpm</filename>
          <sum type="sha256">540c9f790a4f798fbe4bc5ab181bd865dc6b640eda1e15198070650082adf0b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2487</id>
    <title>Moderate: fwupd security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 02:42:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fwupd security and bug fix update</summary>
    <description>The fwupd packages provide a service that allows session software to update device firmware.

Security Fix(es):

* fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287)
* shim: 3rd party shim allow secure boot bypass (CVE-2022-34301)
* shim: 3rd party shim allow secure boot bypass (CVE-2022-34302)
* shim: 3rd party shim allow secure boot bypass (CVE-2022-34303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2487" id="RHSA-2023:2487" type="rhsa" title="RHSA-2023:2487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3287" id="CVE-2022-3287" type="cve" title="CVE-2022-3287"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34301" id="CVE-2022-34301" type="cve" title="CVE-2022-34301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34302" id="CVE-2022-34302" type="cve" title="CVE-2022-34302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34303" id="CVE-2022-34303" type="cve" title="CVE-2022-34303"/>
      <reference href="https://bugzilla.redhat.com/2120687" id="2120687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120699" id="2120699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120701" id="2120701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2129904" id="2129904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2487.html" id="ALSA-2023:2487" type="self" title="ALSA-2023:2487"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="fwupd-devel" version="1.8.10" release="2.el9.alma" epoch="0" arch="s390x" src="fwupd-1.8.10-2.el9.alma.src.rpm">
          <filename>fwupd-devel-1.8.10-2.el9.alma.s390x.rpm</filename>
          <sum type="sha256">b0c4ccd3e245fd0347c471e5985f0dfef8dac01d96eb2dc7525d8c13973a6353</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2519</id>
    <title>Low: samba security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 13:40:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.17.5). (BZ#2131993)

Security Fix(es):

* samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2519" id="RHSA-2023:2519" type="rhsa" title="RHSA-2023:2519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1615" id="CVE-2022-1615" type="cve" title="CVE-2022-1615"/>
      <reference href="https://bugzilla.redhat.com/2122649" id="2122649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2519.html" id="ALSA-2023:2519" type="self" title="ALSA-2023:2519"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="samba-pidl" version="4.17.5" release="102.el9" epoch="0" arch="noarch" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-pidl-4.17.5-102.el9.noarch.rpm</filename>
          <sum type="sha256">39aaadaf78a1fa8a0747154fca75e17ac1ed358cd6d47644f2ec50e7303a1e81</sum>
        </package>
        <package name="samba-test-libs" version="4.17.5" release="102.el9" epoch="0" arch="s390x" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-test-libs-4.17.5-102.el9.s390x.rpm</filename>
          <sum type="sha256">51823c7507e80d627fcb69922500bc0429fa4d7d37081a9a3c4a4c52d96dfc75</sum>
        </package>
        <package name="libwbclient-devel" version="4.17.5" release="102.el9" epoch="0" arch="s390x" src="samba-4.17.5-102.el9.src.rpm">
          <filename>libwbclient-devel-4.17.5-102.el9.s390x.rpm</filename>
          <sum type="sha256">789718445b69c5210cc7b0cea99a94b7224eb3b7ca4c8a554cd2c57d62a04b05</sum>
        </package>
        <package name="libsmbclient-devel" version="4.17.5" release="102.el9" epoch="0" arch="s390x" src="samba-4.17.5-102.el9.src.rpm">
          <filename>libsmbclient-devel-4.17.5-102.el9.s390x.rpm</filename>
          <sum type="sha256">871c51a58d9a3e0f6d74659947824614a4ccb50434feda3a910db1b5f07f4865</sum>
        </package>
        <package name="samba-test" version="4.17.5" release="102.el9" epoch="0" arch="s390x" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-test-4.17.5-102.el9.s390x.rpm</filename>
          <sum type="sha256">ce53f74ad5e506c9614166429010899071c4ba60f03dac0dec63d2a6f9065f80</sum>
        </package>
        <package name="samba-devel" version="4.17.5" release="102.el9" epoch="0" arch="s390x" src="samba-4.17.5-102.el9.src.rpm">
          <filename>samba-devel-4.17.5-102.el9.s390x.rpm</filename>
          <sum type="sha256">fdefdf3f891c5fd3c26ab4940625e8d9e21e61821defac9dea7744176501ee30</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2532</id>
    <title>Low: libarchive security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-12 01:18:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.

Security Fix(es):

* libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2532" id="RHSA-2023:2532" type="rhsa" title="RHSA-2023:2532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36227" id="CVE-2022-36227" type="cve" title="CVE-2022-36227"/>
      <reference href="https://bugzilla.redhat.com/2144972" id="2144972" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2532.html" id="ALSA-2023:2532" type="self" title="ALSA-2023:2532"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libarchive-devel" version="3.5.3" release="4.el9" epoch="0" arch="s390x" src="libarchive-3.5.3-4.el9.src.rpm">
          <filename>libarchive-devel-3.5.3-4.el9.s390x.rpm</filename>
          <sum type="sha256">8ed49b31b4112e8c44f34864475692c034cf2b0700bd8ceb28ed3d4cff86dc9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2582</id>
    <title>Low: lua security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 23:51:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>lua security update</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: heap buffer overread (CVE-2022-28805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2582" id="RHSA-2023:2582" type="rhsa" title="RHSA-2023:2582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28805" id="CVE-2022-28805" type="cve" title="CVE-2022-28805"/>
      <reference href="https://bugzilla.redhat.com/2073884" id="2073884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2582.html" id="ALSA-2023:2582" type="self" title="ALSA-2023:2582"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="lua-devel" version="5.4.4" release="3.el9" epoch="0" arch="s390x" src="lua-5.4.4-3.el9.src.rpm">
          <filename>lua-devel-5.4.4-3.el9.s390x.rpm</filename>
          <sum type="sha256">b13f7a016cd877354520ff10fab7be44c8d29788c922e0681f7a71528d0f3f60</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2589</id>
    <title>Moderate: autotrace security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 23:40:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>autotrace security update</summary>
    <description>AutoTrace is a program for converting bitmaps to vector graphics.

Security Fix(es):

* autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2589" id="RHSA-2023:2589" type="rhsa" title="RHSA-2023:2589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32323" id="CVE-2022-32323" type="cve" title="CVE-2022-32323"/>
      <reference href="https://bugzilla.redhat.com/2107471" id="2107471" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2589.html" id="ALSA-2023:2589" type="self" title="ALSA-2023:2589"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="autotrace" version="0.31.1" release="65.el9" epoch="0" arch="s390x" src="autotrace-0.31.1-65.el9.src.rpm">
          <filename>autotrace-0.31.1-65.el9.s390x.rpm</filename>
          <sum type="sha256">83e9c7fb1b8d97d7e9b544f1f575dbeda53e87aa97358a3b9e5d690ab4b3f218</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2592</id>
    <title>Moderate: golang-github-cpuguy83-md2man security, bug fix, and enhancement update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 23:31:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>golang-github-cpuguy83-md2man security, bug fix, and enhancement update</summary>
    <description>go-md2man converts markdown into roff (man pages).

Security Fix(es):

* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2592" id="RHSA-2023:2592" type="rhsa" title="RHSA-2023:2592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41715" id="CVE-2022-41715" type="cve" title="CVE-2022-41715"/>
      <reference href="https://bugzilla.redhat.com/2132872" id="2132872" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2592.html" id="ALSA-2023:2592" type="self" title="ALSA-2023:2592"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="golang-github-cpuguy83-md2man" version="2.0.2" release="4.el9" epoch="0" arch="s390x" src="golang-github-cpuguy83-md2man-2.0.2-4.el9.src.rpm">
          <filename>golang-github-cpuguy83-md2man-2.0.2-4.el9.s390x.rpm</filename>
          <sum type="sha256">e3f8dd33b933a9c8c0d459cdeac265ddb0ccf275e95cf32feb64596d27b171af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2621</id>
    <title>Important: mysql security update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 23:14:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177731, BZ#2177732)

Security Fix(es):

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)
* mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)
* mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)
* mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)
* mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)
* mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2621" id="RHSA-2023:2621" type="rhsa" title="RHSA-2023:2621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21594" id="CVE-2022-21594" type="cve" title="CVE-2022-21594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21599" id="CVE-2022-21599" type="cve" title="CVE-2022-21599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21604" id="CVE-2022-21604" type="cve" title="CVE-2022-21604"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21608" id="CVE-2022-21608" type="cve" title="CVE-2022-21608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21611" id="CVE-2022-21611" type="cve" title="CVE-2022-21611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21617" id="CVE-2022-21617" type="cve" title="CVE-2022-21617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21625" id="CVE-2022-21625" type="cve" title="CVE-2022-21625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21632" id="CVE-2022-21632" type="cve" title="CVE-2022-21632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21633" id="CVE-2022-21633" type="cve" title="CVE-2022-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21637" id="CVE-2022-21637" type="cve" title="CVE-2022-21637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21640" id="CVE-2022-21640" type="cve" title="CVE-2022-21640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39400" id="CVE-2022-39400" type="cve" title="CVE-2022-39400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39408" id="CVE-2022-39408" type="cve" title="CVE-2022-39408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39410" id="CVE-2022-39410" type="cve" title="CVE-2022-39410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21836" id="CVE-2023-21836" type="cve" title="CVE-2023-21836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21863" id="CVE-2023-21863" type="cve" title="CVE-2023-21863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21864" id="CVE-2023-21864" type="cve" title="CVE-2023-21864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21865" id="CVE-2023-21865" type="cve" title="CVE-2023-21865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21867" id="CVE-2023-21867" type="cve" title="CVE-2023-21867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21868" id="CVE-2023-21868" type="cve" title="CVE-2023-21868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21869" id="CVE-2023-21869" type="cve" title="CVE-2023-21869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21870" id="CVE-2023-21870" type="cve" title="CVE-2023-21870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21871" id="CVE-2023-21871" type="cve" title="CVE-2023-21871"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21873" id="CVE-2023-21873" type="cve" title="CVE-2023-21873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21874" id="CVE-2023-21874" type="cve" title="CVE-2023-21874"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21875" id="CVE-2023-21875" type="cve" title="CVE-2023-21875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21876" id="CVE-2023-21876" type="cve" title="CVE-2023-21876"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21877" id="CVE-2023-21877" type="cve" title="CVE-2023-21877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21878" id="CVE-2023-21878" type="cve" title="CVE-2023-21878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21879" id="CVE-2023-21879" type="cve" title="CVE-2023-21879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21880" id="CVE-2023-21880" type="cve" title="CVE-2023-21880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21881" id="CVE-2023-21881" type="cve" title="CVE-2023-21881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21882" id="CVE-2023-21882" type="cve" title="CVE-2023-21882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21883" id="CVE-2023-21883" type="cve" title="CVE-2023-21883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21887" id="CVE-2023-21887" type="cve" title="CVE-2023-21887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21912" id="CVE-2023-21912" type="cve" title="CVE-2023-21912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21917" id="CVE-2023-21917" type="cve" title="CVE-2023-21917"/>
      <reference href="https://bugzilla.redhat.com/2142861" id="2142861" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142863" id="2142863" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142865" id="2142865" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142868" id="2142868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142869" id="2142869" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142870" id="2142870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142871" id="2142871" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142872" id="2142872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142873" id="2142873" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142875" id="2142875" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142877" id="2142877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142879" id="2142879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142880" id="2142880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2142881" id="2142881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162268" id="2162268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162270" id="2162270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162271" id="2162271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162272" id="2162272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162274" id="2162274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162275" id="2162275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162276" id="2162276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162277" id="2162277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162278" id="2162278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162280" id="2162280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162281" id="2162281" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162282" id="2162282" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162283" id="2162283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162284" id="2162284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162285" id="2162285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162286" id="2162286" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162287" id="2162287" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162288" id="2162288" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162289" id="2162289" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162290" id="2162290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162291" id="2162291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188110" id="2188110" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188112" id="2188112" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2621.html" id="ALSA-2023:2621" type="self" title="ALSA-2023:2621"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="mysql-devel" version="8.0.32" release="1.el9_2" epoch="0" arch="s390x" src="mysql-8.0.32-1.el9_2.src.rpm">
          <filename>mysql-devel-8.0.32-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">d38bc4c5311567218e3d39d900ce59a2c534884b4c92ec2309af4702336ad4d9</sum>
        </package>
        <package name="mysql-libs" version="8.0.32" release="1.el9_2" epoch="0" arch="s390x" src="mysql-8.0.32-1.el9_2.src.rpm">
          <filename>mysql-libs-8.0.32-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">f3904adf6d2f7933f1acd2b2a585088ecef7872d57af8b45279c9232f188b539</sum>
        </package>
        <package name="mysql-test" version="8.0.32" release="1.el9_2" epoch="0" arch="s390x" src="mysql-8.0.32-1.el9_2.src.rpm">
          <filename>mysql-test-8.0.32-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">f5fdf2255c33263e4972957b0a036ec232c9a418cc28be5373781b5dd89cab4d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3423</id>
    <title>Important: cups-filters security update</title>
    <issued date="2023-06-05 00:00:00"/>
    <updated date="2023-06-06 05:52:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3423" id="RHSA-2023:3423" type="rhsa" title="RHSA-2023:3423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24805" id="CVE-2023-24805" type="cve" title="CVE-2023-24805"/>
      <reference href="https://bugzilla.redhat.com/2203051" id="2203051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3423.html" id="ALSA-2023:3423" type="self" title="ALSA-2023:3423"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="cups-filters-devel" version="1.28.7" release="11.el9_2.1" epoch="0" arch="s390x" src="cups-filters-1.28.7-11.el9_2.1.src.rpm">
          <filename>cups-filters-devel-1.28.7-11.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">727071afd6de0baa35af3faf351e2cf20ae64d690dc6ee9abf9e83afbd6b1e94</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3581</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 19:17:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.118 and .NET Runtime 6.0.18.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212379)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3581" id="RHSA-2023:3581" type="rhsa" title="RHSA-2023:3581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3581.html" id="ALSA-2023:3581" type="self" title="ALSA-2023:3581"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.118" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.118-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">7fb912449996b3baef8166f99bd3e8f472320113836137ecc51ec3172b3ec1f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3585</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 19:05:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3585" id="RHSA-2023:3585" type="rhsa" title="RHSA-2023:3585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3585.html" id="ALSA-2023:3585" type="self" title="ALSA-2023:3585"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="python3.11-test" version="3.11.2" release="2.el9_2.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-test-3.11.2-2.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">825d35978d31dc1014a2fcc73cc65c1945b09e65ae72a197ad6a6ef1e4dfce3a</sum>
        </package>
        <package name="python3.11-idle" version="3.11.2" release="2.el9_2.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-idle-3.11.2-2.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">a5fae12ae11258b324497dbc3ac6a8dd982db45696818e23f47d03548a58510c</sum>
        </package>
        <package name="python3.11-debug" version="3.11.2" release="2.el9_2.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.1.src.rpm">
          <filename>python3.11-debug-3.11.2-2.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">e42491accb8a15691976e29c4006c98985e294d98273bfb75394f380d2d0b6ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3592</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 18:38:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.107 and .NET Runtime 7.0.7.

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211877)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument (CVE-2023-32032)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3592" id="RHSA-2023:3592" type="rhsa" title="RHSA-2023:3592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32032" id="CVE-2023-32032" type="cve" title="CVE-2023-32032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212615" id="2212615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3592.html" id="ALSA-2023:3592" type="self" title="ALSA-2023:3592"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.107" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.107-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">df384ffd38e8cb99e868150c9b00da53283ee79da14b4ec1adc53f3113f9c51c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3595</id>
    <title>Important: python3.9 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 18:37:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3595" id="RHSA-2023:3595" type="rhsa" title="RHSA-2023:3595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3595.html" id="ALSA-2023:3595" type="self" title="ALSA-2023:3595"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="python3-test" version="3.9.16" release="1.el9_2.1" epoch="0" arch="s390x" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-test-3.9.16-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">1692e66956dc12dad8f4e89bfffd5700baf91c54042d03bfa7528395dae96289</sum>
        </package>
        <package name="python3-idle" version="3.9.16" release="1.el9_2.1" epoch="0" arch="s390x" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-idle-3.9.16-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">76c27375a06ef1b0081f5f5e005f24548ca1bb770282df66a3f32e3743d239e9</sum>
        </package>
        <package name="python3-debug" version="3.9.16" release="1.el9_2.1" epoch="0" arch="s390x" src="python3.9-3.9.16-1.el9_2.1.src.rpm">
          <filename>python3-debug-3.9.16-1.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">e759549aaa354be0a6530ec78e0db985703ec46570959dbcdc3db65027c3c799</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3661</id>
    <title>Important: texlive security update</title>
    <issued date="2023-06-19 00:00:00"/>
    <updated date="2023-06-23 17:59:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>texlive security update</summary>
    <description>The texlive packages contain TeXLive, an implementation of TeX for Linux or UNIX systems.

Security Fix(es):

* texlive: arbitrary code execution allows document complied with older version (CVE-2023-32700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3661" id="RHSA-2023:3661" type="rhsa" title="RHSA-2023:3661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32700" id="CVE-2023-32700" type="cve" title="CVE-2023-32700"/>
      <reference href="https://bugzilla.redhat.com/2208943" id="2208943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3661.html" id="ALSA-2023:3661" type="self" title="ALSA-2023:3661"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="texlive-gnu-freefont" version="20200406" release="26.el9_2" epoch="9" arch="noarch" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-gnu-freefont-20200406-26.el9_2.noarch.rpm</filename>
          <sum type="sha256">16c75f425a783945efc0d78b91bf1ea50b85ae1c0a2699dfa7710075d8c68c96</sum>
        </package>
        <package name="texlive-lib-devel" version="20200406" release="26.el9_2" epoch="9" arch="s390x" src="texlive-20200406-26.el9_2.src.rpm">
          <filename>texlive-lib-devel-20200406-26.el9_2.s390x.rpm</filename>
          <sum type="sha256">ac3a586070671e6fdf3676a37becd0cd5e99391abfb6a29f0882ec29a43c1972</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3711</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-23 15:36:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)
* libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795)
* libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796)
* libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797)
* libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798)
* libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799)
* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)
* libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)
* libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)
* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)
* libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3711" id="RHSA-2023:3711" type="rhsa" title="RHSA-2023:3711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48281" id="CVE-2022-48281" type="cve" title="CVE-2022-48281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0795" id="CVE-2023-0795" type="cve" title="CVE-2023-0795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0796" id="CVE-2023-0796" type="cve" title="CVE-2023-0796"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0797" id="CVE-2023-0797" type="cve" title="CVE-2023-0797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0798" id="CVE-2023-0798" type="cve" title="CVE-2023-0798"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0799" id="CVE-2023-0799" type="cve" title="CVE-2023-0799"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0800" id="CVE-2023-0800" type="cve" title="CVE-2023-0800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0801" id="CVE-2023-0801" type="cve" title="CVE-2023-0801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0802" id="CVE-2023-0802" type="cve" title="CVE-2023-0802"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0803" id="CVE-2023-0803" type="cve" title="CVE-2023-0803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0804" id="CVE-2023-0804" type="cve" title="CVE-2023-0804"/>
      <reference href="https://bugzilla.redhat.com/2163606" id="2163606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170119" id="2170119" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170146" id="2170146" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170151" id="2170151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170157" id="2170157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170162" id="2170162" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170167" id="2170167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170172" id="2170172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170178" id="2170178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170187" id="2170187" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170192" id="2170192" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3711.html" id="ALSA-2023:3711" type="self" title="ALSA-2023:3711"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libtiff-tools" version="4.4.0" release="8.el9_2" epoch="0" arch="s390x" src="libtiff-4.4.0-8.el9_2.src.rpm">
          <filename>libtiff-tools-4.4.0-8.el9_2.s390x.rpm</filename>
          <sum type="sha256">3e67fa4aac3d27cd0a0081f6e4238da26ea15a5b2e055bef8e23cf0951b4ac43</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3714</id>
    <title>Moderate: postgresql security update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-23 15:06:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)
* postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3714" id="RHSA-2023:3714" type="rhsa" title="RHSA-2023:3714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2454" id="CVE-2023-2454" type="cve" title="CVE-2023-2454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2455" id="CVE-2023-2455" type="cve" title="CVE-2023-2455"/>
      <reference href="https://bugzilla.redhat.com/2207568" id="2207568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207569" id="2207569" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3714.html" id="ALSA-2023:3714" type="self" title="ALSA-2023:3714"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="postgresql-static" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-static-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">1799dbb8defadccecbb064124b5017c2d902267782302ac11b2513e930fbb41f</sum>
        </package>
        <package name="postgresql-server-devel" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-server-devel-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">213a24ea15d3b9c3015325ff991110e1b0f45fc3566f6ce2a59eb197827827f9</sum>
        </package>
        <package name="postgresql-private-devel" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-private-devel-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">9b033d60713607e8b3c81d0060283cb8921c2a6dbf3dafb63606aac3b6fb3673</sum>
        </package>
        <package name="postgresql-docs" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-docs-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">c43e96cdad177c0a6495b64b465b24ee823660e83430e401cdc952c95b14bcb4</sum>
        </package>
        <package name="postgresql-test" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-test-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">cceebd4b0ece68afb1248a1f00c8a3e0cdbbeb18e0e26ff92bd64a1a6c3b8cf0</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.11" release="1.el9_2" epoch="0" arch="s390x" src="postgresql-13.11-1.el9_2.src.rpm">
          <filename>postgresql-upgrade-devel-13.11-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">e028dfe2480679877b89b30c522b14079a028ee47a60954bb9006c5f76b139e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3715</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-06-23 14:54:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

* libvirt: Memory leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3715" id="RHSA-2023:3715" type="rhsa" title="RHSA-2023:3715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2700" id="CVE-2023-2700" type="cve" title="CVE-2023-2700"/>
      <reference href="https://bugzilla.redhat.com/2203653" id="2203653" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3715.html" id="ALSA-2023:3715" type="self" title="ALSA-2023:3715"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libvirt-docs" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-docs-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">1824cb0ddd8ea978275d0959246c9d05a9ee9f680d80eb5a7a54ae8a2e636fd7</sum>
        </package>
        <package name="libvirt-client-qemu" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-client-qemu-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">6739b4705113934dded99177eb28a04b2032b814169e31bdcbbbd588b83f7957</sum>
        </package>
        <package name="libvirt-devel" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-devel-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">7b689a9e6dbbaea10dea9a5a8ae55bb8f95d0e0247519ffd5c6bc1bd51d47a0e</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="9.0.0" release="10.2.el9_2" epoch="0" arch="s390x" src="libvirt-9.0.0-10.2.el9_2.src.rpm">
          <filename>libvirt-lock-sanlock-9.0.0-10.2.el9_2.s390x.rpm</filename>
          <sum type="sha256">d524aed87acb72a81fbb487949c567eef81ddd4f9c25102846d4de5562212c4a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4057</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 10:21:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime 7.0.9). (BZ#2219634)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4057" id="RHSA-2023:4057" type="rhsa" title="RHSA-2023:4057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4057.html" id="ALSA-2023:4057" type="self" title="ALSA-2023:4057"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.109" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.109-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">4d5cbaed505bad402b1c78c114c2e0b1e47509218ec9a84a74ab8be6b69aa333</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4060</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-13 21:20:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime 6.0.20). (BZ#2219640)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4060" id="RHSA-2023:4060" type="rhsa" title="RHSA-2023:4060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4060.html" id="ALSA-2023:4060" type="self" title="ALSA-2023:4060"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.120" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.120-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">ef5db91b5a03b6637a411fd165f6a718cd7ac361ca1d8e9d4de9c7923204369c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4099</id>
    <title>Important: bind security update</title>
    <issued date="2023-07-17 00:00:00"/>
    <updated date="2023-07-18 08:38:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4099" id="RHSA-2023:4099" type="rhsa" title="RHSA-2023:4099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2828" id="CVE-2023-2828" type="cve" title="CVE-2023-2828"/>
      <reference href="https://bugzilla.redhat.com/2216227" id="2216227" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4099.html" id="ALSA-2023:4099" type="self" title="ALSA-2023:4099"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="bind-doc" version="9.16.23" release="11.el9_2.1" epoch="32" arch="noarch" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-doc-9.16.23-11.el9_2.1.noarch.rpm</filename>
          <sum type="sha256">3626cfa861e4506dc542b852affac40020461c645de4b287336e8be7112c589f</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="11.el9_2.1" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.1.src.rpm">
          <filename>bind-devel-9.16.23-11.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">f94ae2459018cde3be577bc23293a940c802c782a159b26bef1e404e27870a4d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4158</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 17:32:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-9] (BZ#2223100)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4158" id="RHSA-2023:4158" type="rhsa" title="RHSA-2023:4158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4158.html" id="ALSA-2023:4158" type="self" title="ALSA-2023:4158"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">086ce2c65853f8992175fa557147c33e6837e12a1a966b2bd6330895845863e9</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">3f4da64d37062c5047d430210fc27ce8e285c6b1822211ddf98221709bce9606</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">737de8ddfc0ff38dd5c6a80a18fae37dd8f8b9e4f3119572667c65f5c206fafe</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">79f54e20ed5bdaff84997812af258c6174b2e7c60fec5af6bbb76753b27fef07</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">7baec4c8d07cc7a517e24d989c4904549240bbf85c5d2854adc2a6a570c926ce</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">d9904df7006d315bd4d73318da9dc0d8ec95a2de8648a88b08b9bb8d77705a9f</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.20.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">dd0bf251c6e39ca70cf62fb0b86c0bf67963e98ff20d0d7c7e883f4b63c926c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4177</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 17:20:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221653)
* Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [almalinux-9] (BZ#2222852)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4177" id="RHSA-2023:4177" type="rhsa" title="RHSA-2023:4177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22044" id="CVE-2023-22044" type="cve" title="CVE-2023-22044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221642" id="2221642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4177.html" id="ALSA-2023:4177" type="self" title="ALSA-2023:4177"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="java-17-openjdk-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">438d6786dbb40f45049c109d562d8ef5cdc90dca4de18897d89737b577c16f41</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">66534cd9741a2b251d79b98a8e961627fc7898d1607d3a243572a587d890686c</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">876cd161ac73a15789e40b66bc146b4067355bd18f3218a0aa35be4abb6f8093</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">9a8e152bcd0493ee8a2aa3d22e663c16862686268ef9166d66525cd4ed20c5aa</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">a6dd314dc46459854310b1c0724aa6fcdff1a462484fa19002ceaf3e8e9c191e</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">a8443e467143dd7a86e36d49dae41ffb6e996d119461841717201287be26f6e6</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.8.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">de9f936071f39ea7862299f9def890584b5ce46a45a8098709bb744c0cfa0381</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4325</id>
    <title>Moderate: samba security and bug fix update</title>
    <issued date="2023-07-31 00:00:00"/>
    <updated date="2023-08-03 11:47:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security and bug fix update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: SMB2 packet signing is not enforced when "server signing = required" is set (CVE-2023-3347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The trust relationship between this workstation and the primary domain failed (BZ#2223600)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4325" id="RHSA-2023:4325" type="rhsa" title="RHSA-2023:4325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3347" id="CVE-2023-3347" type="cve" title="CVE-2023-3347"/>
      <reference href="https://bugzilla.redhat.com/2222792" id="2222792" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4325.html" id="ALSA-2023:4325" type="self" title="ALSA-2023:4325"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libsmbclient-devel" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>libsmbclient-devel-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">0b6f5b722015b202a055ad8e45fc34def6391cf5ea11800c6f3e02c7422aaed8</sum>
        </package>
        <package name="python3-samba-test" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>python3-samba-test-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">0d22a1048752358f7245302e17d41912b55d4539dfd048904f4839cd4cf5aa64</sum>
        </package>
        <package name="python3-samba-devel" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>python3-samba-devel-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">15194bc200f5122ceaa849725bc6779071845f0336f8fd6fc661b9495415514b</sum>
        </package>
        <package name="samba-devel" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-devel-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">46022ce801915b381b9311aa1f32b7e800e4337d621f79e338a114bcb8fa6907</sum>
        </package>
        <package name="libnetapi-devel" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>libnetapi-devel-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">5776c2ffd32ede969d07d5dc06ed7a34524ed5d633836448985d0817e58d1306</sum>
        </package>
        <package name="samba-test" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-test-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">73c671b70584b8e9079dcf7c1227b3aa580d5c42a292bc14bea6c89d972c8548</sum>
        </package>
        <package name="libwbclient-devel" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>libwbclient-devel-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">7e5a4eb95f00b66f3fef138df8cb12d508ade18cf47d04af186b7541d61adc45</sum>
        </package>
        <package name="samba-pidl" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="noarch" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-pidl-4.17.5-103.el9_2.alma.noarch.rpm</filename>
          <sum type="sha256">a5359420cdecee730be12c0b6671254d313b1999e65343f668df6c6fbf625afc</sum>
        </package>
        <package name="samba-test-libs" version="4.17.5" release="103.el9_2.alma" epoch="0" arch="s390x" src="samba-4.17.5-103.el9_2.alma.src.rpm">
          <filename>samba-test-libs-4.17.5-103.el9_2.alma.s390x.rpm</filename>
          <sum type="sha256">f691104bcbd7af39c3f2ac03e7d4eda523bb9300b250e3f5836a865c00eca545</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4377</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-08 13:12:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipvlan: out-of-bounds write caused by unclear skb-&gt;cb (CVE-2023-3090)
* kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)
* kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869)
* kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458)
* kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4377" id="RHSA-2023:4377" type="rhsa" title="RHSA-2023:4377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45869" id="CVE-2022-45869" type="cve" title="CVE-2022-45869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0458" id="CVE-2023-0458" type="cve" title="CVE-2023-0458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1998" id="CVE-2023-1998" type="cve" title="CVE-2023-1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3090" id="CVE-2023-3090" type="cve" title="CVE-2023-3090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35788" id="CVE-2023-35788" type="cve" title="CVE-2023-35788"/>
      <reference href="https://bugzilla.redhat.com/2151317" id="2151317" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187257" id="2187257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2193219" id="2193219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215768" id="2215768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218672" id="2218672" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4377.html" id="ALSA-2023:4377" type="self" title="ALSA-2023:4377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="284.25.1.el9_2" epoch="0" arch="s390x" src="kernel-5.14.0-284.25.1.el9_2.src.rpm">
          <filename>kernel-cross-headers-5.14.0-284.25.1.el9_2.s390x.rpm</filename>
          <sum type="sha256">4756c57c1d0e6daaeecda63fce172bc3f875a72917ad27f0f4b79c7a2b9280d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4642</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:47:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4642" id="RHSA-2023:4642" type="rhsa" title="RHSA-2023:4642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4642.html" id="ALSA-2023:4642" type="self" title="ALSA-2023:4642"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.110" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.110-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">2b6dc57610a2b2369da8905be49ba4efa42b3e354e0bc56d1b1163c01de937e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4644</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:24:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4644" id="RHSA-2023:4644" type="rhsa" title="RHSA-2023:4644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4644.html" id="ALSA-2023:4644" type="self" title="ALSA-2023:4644"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.121" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.121-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">874a87a04ec3c3cb84d64295e2fa48b80008f0b10bc188a058269ec9178b4b1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5048</id>
    <title>Important: flac security update</title>
    <issued date="2023-09-11 00:00:00"/>
    <updated date="2023-09-12 09:07:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flac security update</summary>
    <description>FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5048" id="RHSA-2023:5048" type="rhsa" title="RHSA-2023:5048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-22219" id="CVE-2020-22219" type="cve" title="CVE-2020-22219"/>
      <reference href="https://bugzilla.redhat.com/2235489" id="2235489" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5048.html" id="ALSA-2023:5048" type="self" title="ALSA-2023:5048"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="flac" version="1.3.3" release="10.el9_2.1" epoch="0" arch="s390x" src="flac-1.3.3-10.el9_2.1.src.rpm">
          <filename>flac-1.3.3-10.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">77b7b7fc4ec7f32a551eaa76354794069c4556a50e9484c25f305f2866cbae68</sum>
        </package>
        <package name="flac-devel" version="1.3.3" release="10.el9_2.1" epoch="0" arch="s390x" src="flac-1.3.3-10.el9_2.1.src.rpm">
          <filename>flac-devel-1.3.3-10.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">c52d8e39a1347474098d8d80a557046fa78a8840fbd63585db6010c289c5780b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5143</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 10:12:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.122 and .NET Runtime 6.0.22.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5143" id="RHSA-2023:5143" type="rhsa" title="RHSA-2023:5143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5143.html" id="ALSA-2023:5143" type="self" title="ALSA-2023:5143"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.122" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">93e6cddb67ea6b11077afb69bf927852f311f984579298bfbce3a5003ff708aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5146</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 10:35:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.111 and .NET Runtime 7.0.11.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5146" id="RHSA-2023:5146" type="rhsa" title="RHSA-2023:5146"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5146.html" id="ALSA-2023:5146" type="self" title="ALSA-2023:5146"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.111" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.111-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">51254adeaf1629198d14570c5ddeeb248a7d2758b3f4a61e613f1834d1f10844</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5214</id>
    <title>Important: libwebp security update</title>
    <issued date="2023-09-19 00:00:00"/>
    <updated date="2023-09-20 11:58:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libwebp security update</summary>
    <description>The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

* libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5214" id="RHSA-2023:5214" type="rhsa" title="RHSA-2023:5214"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4863" id="CVE-2023-4863" type="cve" title="CVE-2023-4863"/>
      <reference href="https://bugzilla.redhat.com/2238431" id="2238431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5214.html" id="ALSA-2023:5214" type="self" title="ALSA-2023:5214"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libwebp-tools" version="1.2.0" release="7.el9_2" epoch="0" arch="s390x" src="libwebp-1.2.0-7.el9_2.src.rpm">
          <filename>libwebp-tools-1.2.0-7.el9_2.s390x.rpm</filename>
          <sum type="sha256">f25921176c5b4e071c0e1b4d2c0454ffa99df4735834fed41af3cca993496f76</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5453</id>
    <title>Important: glibc security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 10:28:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911)
* glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527)
* glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806)
* glibc: potential use-after-free in gaih_inet() (CVE-2023-4813)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5453" id="RHSA-2023:5453" type="rhsa" title="RHSA-2023:5453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4527" id="CVE-2023-4527" type="cve" title="CVE-2023-4527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4806" id="CVE-2023-4806" type="cve" title="CVE-2023-4806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4813" id="CVE-2023-4813" type="cve" title="CVE-2023-4813"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4911" id="CVE-2023-4911" type="cve" title="CVE-2023-4911"/>
      <reference href="https://bugzilla.redhat.com/2234712" id="2234712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237782" id="2237782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237798" id="2237798" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238352" id="2238352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5453.html" id="ALSA-2023:5453" type="self" title="ALSA-2023:5453"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="glibc-static" version="2.34" release="60.el9_2.7" epoch="0" arch="s390x" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-static-2.34-60.el9_2.7.s390x.rpm</filename>
          <sum type="sha256">0785324c3e944f0a3975ad90e85d10d7c5be20bf21e03e5d2e0714426212315b</sum>
        </package>
        <package name="glibc-benchtests" version="2.34" release="60.el9_2.7" epoch="0" arch="s390x" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-benchtests-2.34-60.el9_2.7.s390x.rpm</filename>
          <sum type="sha256">13515916d89c5f840f09a4a9652b02ad074a966a9c7b6b7409dc0a5bf750c6ec</sum>
        </package>
        <package name="nss_hesiod" version="2.34" release="60.el9_2.7" epoch="0" arch="s390x" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>nss_hesiod-2.34-60.el9_2.7.s390x.rpm</filename>
          <sum type="sha256">3ec2fc6061bb0ca2f7c2e6df8bdd244acc08686039c78f4003a3bddc5b9708e2</sum>
        </package>
        <package name="glibc-nss-devel" version="2.34" release="60.el9_2.7" epoch="0" arch="s390x" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>glibc-nss-devel-2.34-60.el9_2.7.s390x.rpm</filename>
          <sum type="sha256">e156ca106fddb147dc15435b684a89b3161800b08e16e86e536f182063cbe465</sum>
        </package>
        <package name="nss_db" version="2.34" release="60.el9_2.7" epoch="0" arch="s390x" src="glibc-2.34-60.el9_2.7.src.rpm">
          <filename>nss_db-2.34-60.el9_2.7.s390x.rpm</filename>
          <sum type="sha256">fd14a2946c8db088e9c10f0ecb874e4a4889a9a08355aadd9d27c65187b04165</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5456</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 10:55:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5456" id="RHSA-2023:5456" type="rhsa" title="RHSA-2023:5456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5456.html" id="ALSA-2023:5456" type="self" title="ALSA-2023:5456"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="python3.11-idle" version="3.11.2" release="2.el9_2.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.2.src.rpm">
          <filename>python3.11-idle-3.11.2-2.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">4c295cffcb7e5aa9707067a58a491caa100c27d0013a637516dd87445be4a12b</sum>
        </package>
        <package name="python3.11-debug" version="3.11.2" release="2.el9_2.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.2.src.rpm">
          <filename>python3.11-debug-3.11.2-2.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">9f5beec108447c7e4ac0b6bc98f68e85c4fbf2140d6a99bc159379c82f323622</sum>
        </package>
        <package name="python3.11-test" version="3.11.2" release="2.el9_2.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el9_2.2.src.rpm">
          <filename>python3.11-test-3.11.2-2.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">a655b6fcdac7c3bb9f38be3d6e18a13af447255b08f6d16fda5defd3eb1cd82c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5459</id>
    <title>Important: ghostscript security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 11:13:30"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices (CVE-2023-36664)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5459" id="RHSA-2023:5459" type="rhsa" title="RHSA-2023:5459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36664" id="CVE-2023-36664" type="cve" title="CVE-2023-36664"/>
      <reference href="https://bugzilla.redhat.com/2217798" id="2217798" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5459.html" id="ALSA-2023:5459" type="self" title="ALSA-2023:5459"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libgs-devel" version="9.54.0" release="10.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-10.el9_2.src.rpm">
          <filename>libgs-devel-9.54.0-10.el9_2.s390x.rpm</filename>
          <sum type="sha256">ab153ca99b56b26207f18ed30c542cf849ca1af9a0e531fa88f5faa24b504628</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5462</id>
    <title>Important: python3.9 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 11:34:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5462" id="RHSA-2023:5462" type="rhsa" title="RHSA-2023:5462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5462.html" id="ALSA-2023:5462" type="self" title="ALSA-2023:5462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="python3-test" version="3.9.16" release="1.el9_2.2" epoch="0" arch="s390x" src="python3.9-3.9.16-1.el9_2.2.src.rpm">
          <filename>python3-test-3.9.16-1.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">45df3cc7460c315693faf6318c6ae6033344c6e7c61ec6df575d65d936f20c39</sum>
        </package>
        <package name="python3-debug" version="3.9.16" release="1.el9_2.2" epoch="0" arch="s390x" src="python3.9-3.9.16-1.el9_2.2.src.rpm">
          <filename>python3-debug-3.9.16-1.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">bc8282e25360b642458df1fe1c7243e40d7a9448bcf07194abfc36b55aa2dd5a</sum>
        </package>
        <package name="python3-idle" version="3.9.16" release="1.el9_2.2" epoch="0" arch="s390x" src="python3.9-3.9.16-1.el9_2.2.src.rpm">
          <filename>python3-idle-3.9.16-1.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">c3d35687cd8b00e0592a71f38d5920b1736a9cf818363e21ea124057bb73cdc3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5539</id>
    <title>Important: libvpx security update</title>
    <issued date="2023-10-09 00:00:00"/>
    <updated date="2023-10-09 19:24:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5539" id="RHSA-2023:5539" type="rhsa" title="RHSA-2023:5539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44488" id="CVE-2023-44488" type="cve" title="CVE-2023-44488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5217" id="CVE-2023-5217" type="cve" title="CVE-2023-5217"/>
      <reference href="https://bugzilla.redhat.com/2241191" id="2241191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241806" id="2241806" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5539.html" id="ALSA-2023:5539" type="self" title="ALSA-2023:5539"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libvpx-devel" version="1.9.0" release="7.el9_2.alma.1" epoch="0" arch="s390x" src="libvpx-1.9.0-7.el9_2.alma.1.src.rpm">
          <filename>libvpx-devel-1.9.0-7.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">6e7ecf0eb9613ff4b282387ae15b790e678976cd4784a2187ec3e377acffbeb2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5684</id>
    <title>Important: galera and mariadb security update</title>
    <issued date="2023-10-12 00:00:00"/>
    <updated date="2023-10-13 15:18:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>galera and mariadb security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: galera
(26.4.14), mariadb (10.5.22).

Security Fix(es):

* mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157)
* mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081)
* mariadb: assertion failure at table-&gt;get_ref_count() == 0 in dict0dict.cc (CVE-2022-32082)
* mariadb: segmentation fault via the component sub_select (CVE-2022-32084)
* mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089)
* mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)
* mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)
* mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5684" id="RHSA-2023:5684" type="rhsa" title="RHSA-2023:5684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32081" id="CVE-2022-32081" type="cve" title="CVE-2022-32081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32082" id="CVE-2022-32082" type="cve" title="CVE-2022-32082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32084" id="CVE-2022-32084" type="cve" title="CVE-2022-32084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32089" id="CVE-2022-32089" type="cve" title="CVE-2022-32089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32091" id="CVE-2022-32091" type="cve" title="CVE-2022-32091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38791" id="CVE-2022-38791" type="cve" title="CVE-2022-38791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47015" id="CVE-2022-47015" type="cve" title="CVE-2022-47015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5157" id="CVE-2023-5157" type="cve" title="CVE-2023-5157"/>
      <reference href="https://bugzilla.redhat.com/2106028" id="2106028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106030" id="2106030" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106034" id="2106034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106035" id="2106035" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106042" id="2106042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130105" id="2130105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163609" id="2163609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240246" id="2240246" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5684.html" id="ALSA-2023:5684" type="self" title="ALSA-2023:5684"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="mariadb-embedded-devel" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-embedded-devel-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">b2e6e1a8b74543a6b9b8178b9d2005cd78b8e9da34666e0a031cec9e576d2e2b</sum>
        </package>
        <package name="mariadb-test" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-test-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">bde3f5efc7249d935ae9f09f2252cb29395ce49f3ff209d5fe9852dd80b78b68</sum>
        </package>
        <package name="mariadb-devel" version="10.5.22" release="1.el9_2.alma.1" epoch="3" arch="s390x" src="mariadb-10.5.22-1.el9_2.alma.1.src.rpm">
          <filename>mariadb-devel-10.5.22-1.el9_2.alma.1.s390x.rpm</filename>
          <sum type="sha256">f08967359780af85c3b4b3c975d6fd22dcb811593466ee84424d343cd11de038</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5689</id>
    <title>Important: bind security update</title>
    <issued date="2023-10-12 00:00:00"/>
    <updated date="2023-10-13 14:58:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5689" id="RHSA-2023:5689" type="rhsa" title="RHSA-2023:5689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3341" id="CVE-2023-3341" type="cve" title="CVE-2023-3341"/>
      <reference href="https://bugzilla.redhat.com/2239621" id="2239621" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5689.html" id="ALSA-2023:5689" type="self" title="ALSA-2023:5689"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="bind-doc" version="9.16.23" release="11.el9_2.2" epoch="32" arch="noarch" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-doc-9.16.23-11.el9_2.2.noarch.rpm</filename>
          <sum type="sha256">66efa77c46000b37186909a04710d2643178d4f0246f35f8d0a8c8eddd9829b0</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="11.el9_2.2" epoch="32" arch="s390x" src="bind-9.16.23-11.el9_2.2.src.rpm">
          <filename>bind-devel-9.16.23-11.el9_2.2.s390x.rpm</filename>
          <sum type="sha256">cba32d5f0d4abbd9d6d6a36ef2d2c071f61ed159e0126563b87e24aa08a9f424</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5708</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 07:29:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are  .NET 6.0 to SDK 6.0.123 and Runtime 6.0.23.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5708" id="RHSA-2023:5708" type="rhsa" title="RHSA-2023:5708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5708.html" id="ALSA-2023:5708" type="self" title="ALSA-2023:5708"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.123" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.123-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">168a14bb2143ee7ebe94f255ee3da5f78f50ca692a65cc3b8a59c49d3c3fa51f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5711</id>
    <title>Moderate: nginx security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 07:11:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. 

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5711" id="RHSA-2023:5711" type="rhsa" title="RHSA-2023:5711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5711.html" id="ALSA-2023:5711" type="self" title="ALSA-2023:5711"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="nginx-mod-devel" version="1.20.1" release="14.el9_2.1.alma.1" epoch="1" arch="s390x" src="nginx-1.20.1-14.el9_2.1.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">7981ddf9f3d033e613f40bace2138c75fca81596dc565f3be57953a9219cf298</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5744</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 19:54:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 11.0.20 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 11.0.20.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237175)
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 11.0.20 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 11.0.20.1, increases it to 16 MB.
* The serviceability agent would print an exception when encountering null addresses while producing thread dumps. These null values are now handled appropriately. (JDK-8243210)
* The /usr/bin/jfr alternative is now owned by the java-11-openjdk package (AlmaLinux-13532)
* The jcmd tool is now provided by the java-11-openjdk-headless package, rather than java-11-openjdk-devel, to make it more accessible (AlmaLinux-13536)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5744" id="RHSA-2023:5744" type="rhsa" title="RHSA-2023:5744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5744.html" id="ALSA-2023:5744" type="self" title="ALSA-2023:5744"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">136223fd8426301dde974af156e43faf972877efe529cd127c686cbb333beab0</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">57284ea61c6b08c7ac96f30b157d0cd2648553341cf77e2fd3b0d332910121b6</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">829f1bf641bed9342782994be4d2ce72f13d6db091450d0749aefda982a0a504</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">a821d7bb8d669cff3b0a1b6e02cc5b95a8b22b7550b50f77381a8de6bfedbfd8</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">b2aa719a8bc29f195327d0f5ce5cc0e96538277627cdc30a2be956cef04c600c</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">f01c8e023cb771cb7f8129ed8a0fe0e4824bf2207d0ce5d788a62aaa2a2e42f0</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.21.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.21.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">f502ac809dcb98fadc44b9bd766d6771e0db5d3150487d514c41ee278c1cc98e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5749</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 10:14:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are  .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5749" id="RHSA-2023:5749" type="rhsa" title="RHSA-2023:5749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5749.html" id="ALSA-2023:5749" type="self" title="ALSA-2023:5749"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.112" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.112-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">4413f7f822e1cdbe70e83a25f84958562335e5581760b5deef33bb158771492c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5753</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 19:28:43"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 17.0.8 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 17.0.9, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237185)
* The /usr/bin/jfr alternative is now owned by the java-17-openjdk package (AlmaLinux-13648)
* The jcmd tool is now provided by the java-17-openjdk-headless package, rather than java-17-openjdk-devel, to make it more accessible (AlmaLinux-13651)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5753" id="RHSA-2023:5753" type="rhsa" title="RHSA-2023:5753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5753.html" id="ALSA-2023:5753" type="self" title="ALSA-2023:5753"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="java-17-openjdk-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">675087dec40a7af0b7db105ac2be64c993b1f65c1b73f728e53298481026592d</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">a4dc47d05ad988897b9fba2671180bd4466ef07fa58695400e6e50d933ad5c7a</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">bdecb354e16b1d34810faf149e08a53c9a33eaa16f64000f41caae723fe1cdee</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">cdd85d96295d9da97ab42d2853ddb345b982e7176aa6d18947edec58ae0bb41f</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">d626f14c33cce7ede7c491174148a68a3f124cf3f1847c4379778b567fd9ceed</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">dc53a40aacfcd1559eb8657ab24df8fb6c81246a144d9aaf8bca36c20e28d185</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.9.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.9.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">e18733e4d178c61c176d94f39f9ece881da0da15bc8bea646cd480ea8c5564da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5838</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-19 06:29:05"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5838" id="RHSA-2023:5838" type="rhsa" title="RHSA-2023:5838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5838.html" id="ALSA-2023:5838" type="self" title="ALSA-2023:5838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="nghttp2" version="1.43.0" release="5.el9_2.1" epoch="0" arch="s390x" src="nghttp2-1.43.0-5.el9_2.1.src.rpm">
          <filename>nghttp2-1.43.0-5.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">4a349dcd81731ed6e9f85960a1cfd3378e785c45e41683be7d06acdfc052bb8e</sum>
        </package>
        <package name="libnghttp2-devel" version="1.43.0" release="5.el9_2.1" epoch="0" arch="s390x" src="nghttp2-1.43.0-5.el9_2.1.src.rpm">
          <filename>libnghttp2-devel-1.43.0-5.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">fbd4ef9bfbb683f06954802afa1c07c4239e816089f2bafcb4bc4f7f9a7f11b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5924</id>
    <title>Important: varnish security update</title>
    <issued date="2023-10-19 00:00:00"/>
    <updated date="2023-10-20 07:42:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5924" id="RHSA-2023:5924" type="rhsa" title="RHSA-2023:5924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5924.html" id="ALSA-2023:5924" type="self" title="ALSA-2023:5924"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="varnish-devel" version="6.6.2" release="3.el9_2.1" epoch="0" arch="s390x" src="varnish-6.6.2-3.el9_2.1.src.rpm">
          <filename>varnish-devel-6.6.2-3.el9_2.1.s390x.rpm</filename>
          <sum type="sha256">4422d532b1e1accf0804fd6b6572bc5685b1484b9b7d1de8f8c388a5cd161724</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6242</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-11-01 00:00:00"/>
    <updated date="2023-11-03 10:06:19"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.124 and .NET Runtime 6.0.24.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6242" id="RHSA-2023:6242" type="rhsa" title="RHSA-2023:6242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6242.html" id="ALSA-2023:6242" type="self" title="ALSA-2023:6242"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.124" release="1.el9_2" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el9_2.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.124-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">9937fccc1e79155b87e55b1c4ad1245ea7b2fc0c640595441b2fc51fca7e955e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2023:6246</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-11-02 00:00:00"/>
    <updated date="2023-11-03 11:04:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.113 and .NET Runtime 7.0.13.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6246" id="RHSA-2023:6246" type="rhsa" title="RHSA-2023:6246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6246.html" id="ALSA-2023:6246" type="self" title="ALSA-2023:6246"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.113" release="1.el9_2" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el9_2.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.113-1.el9_2.s390x.rpm</filename>
          <sum type="sha256">0f9511f32262778c1f80122819b8d2d587bcd632d751cfcc90d49b3b69f5357f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6265</id>
    <title>Important: ghostscript security update</title>
    <issued date="2023-11-02 00:00:00"/>
    <updated date="2023-11-03 10:25:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6265" id="RHSA-2023:6265" type="rhsa" title="RHSA-2023:6265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43115" id="CVE-2023-43115" type="cve" title="CVE-2023-43115"/>
      <reference href="https://bugzilla.redhat.com/2241108" id="2241108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6265.html" id="ALSA-2023:6265" type="self" title="ALSA-2023:6265"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libgs-devel" version="9.54.0" release="11.el9_2" epoch="0" arch="s390x" src="ghostscript-9.54.0-11.el9_2.src.rpm">
          <filename>libgs-devel-9.54.0-11.el9_2.s390x.rpm</filename>
          <sum type="sha256">c4c70522ebcc0293a397f280b4db779c9134d07cb6fb1752f40c301bd4313a95</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6330</id>
    <title>Moderate: edk2 security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 12:35:35"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security, bug fix, and enhancement update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() (CVE-2019-14560)
* openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6330" id="RHSA-2023:6330" type="rhsa" title="RHSA-2023:6330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-14560" id="CVE-2019-14560" type="cve" title="CVE-2019-14560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2650" id="CVE-2023-2650" type="cve" title="CVE-2023-2650"/>
      <reference href="https://bugzilla.redhat.com/1858038" id="1858038" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207947" id="2207947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6330.html" id="ALSA-2023:6330" type="self" title="ALSA-2023:6330"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="edk2-aarch64" version="20230524" release="3.el9" epoch="0" arch="noarch" src="edk2-20230524-3.el9.src.rpm">
          <filename>edk2-aarch64-20230524-3.el9.noarch.rpm</filename>
          <sum type="sha256">7f420a2e6902aa83721973936da687385ce3f9a318f79cec650eaf58da03c9ed</sum>
        </package>
        <package name="edk2-tools-doc" version="20230524" release="3.el9" epoch="0" arch="noarch" src="edk2-20230524-3.el9.src.rpm">
          <filename>edk2-tools-doc-20230524-3.el9.noarch.rpm</filename>
          <sum type="sha256">bc4917712bdd37c686a2e9927839c2ca2f3285b9325d99e9fe4bb9eb8a68f06b</sum>
        </package>
        <package name="edk2-ovmf" version="20230524" release="3.el9" epoch="0" arch="noarch" src="edk2-20230524-3.el9.src.rpm">
          <filename>edk2-ovmf-20230524-3.el9.noarch.rpm</filename>
          <sum type="sha256">cf00362ca3ecc9d6ce43ec1f21168c8524b96b2675854692c3afd7bf709e0918</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6340</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6340" id="RHSA-2023:6340" type="rhsa" title="RHSA-2023:6340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1393" id="CVE-2023-1393" type="cve" title="CVE-2023-1393"/>
      <reference href="https://bugzilla.redhat.com/2180288" id="2180288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6340.html" id="ALSA-2023:6340" type="self" title="ALSA-2023:6340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="19.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-19.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-19.el9.s390x.rpm</filename>
          <sum type="sha256">6eef1d6395c1959bac66e93712ba68340c6eb78d030c94c70e62a23e1f5d0640</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="19.el9" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-19.el9.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-19.el9.noarch.rpm</filename>
          <sum type="sha256">ed9468d65a98be100088d86f19083f24832179b05fca80ab20b7058d4b20ea55</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6369</id>
    <title>Moderate: qt5 security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5 security and bug fix update</summary>
    <description>Qt is a software toolkit for developing applications.

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)
* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)
* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)
* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)
* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6369" id="RHSA-2023:6369" type="rhsa" title="RHSA-2023:6369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32573" id="CVE-2023-32573" type="cve" title="CVE-2023-32573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33285" id="CVE-2023-33285" type="cve" title="CVE-2023-33285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34410" id="CVE-2023-34410" type="cve" title="CVE-2023-34410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37369" id="CVE-2023-37369" type="cve" title="CVE-2023-37369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38197" id="CVE-2023-38197" type="cve" title="CVE-2023-38197"/>
      <reference href="https://bugzilla.redhat.com/2208135" id="2208135" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2209488" id="2209488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212747" id="2212747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222767" id="2222767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2232173" id="2232173" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6369.html" id="ALSA-2023:6369" type="self" title="ALSA-2023:6369"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="qt5-devel" version="5.15.9" release="1.el9" epoch="0" arch="noarch" src="qt5-5.15.9-1.el9.src.rpm">
          <filename>qt5-devel-5.15.9-1.el9.noarch.rpm</filename>
          <sum type="sha256">14df93938a3e6baf085f3edb3deec26a56cf6eff403e27dbc124e5a0fdca69d5</sum>
        </package>
        <package name="qt5-qtbase-static" version="5.15.9" release="7.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-7.el9.src.rpm">
          <filename>qt5-qtbase-static-5.15.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">5e6569a8f0a4010f41681e082126fe4fdce14eca4323827a67c654ea861a655c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6409</id>
    <title>Moderate: libvirt security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:06:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security, bug fix, and enhancement update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

The following packages have been upgraded to a later upstream version: libvirt (9.5.0). (BZ#2175785)

Security Fix(es):

* libvirt: improper locking in virStoragePoolObjListSearch may lead to denial of service (CVE-2023-3750)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6409" id="RHSA-2023:6409" type="rhsa" title="RHSA-2023:6409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3750" id="CVE-2023-3750" type="cve" title="CVE-2023-3750"/>
      <reference href="https://bugzilla.redhat.com/2222210" id="2222210" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6409.html" id="ALSA-2023:6409" type="self" title="ALSA-2023:6409"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libvirt-daemon-plugin-sanlock" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">0b67615059dedf5f0db78b2f10a4980024fb73bd8ed61a7705e92d5b527f4048</sum>
        </package>
        <package name="libvirt-client-qemu" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-client-qemu-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">73e6d3ebb410507585094a6709383aa0845aae1a55c8d480ef90364595ce8b5e</sum>
        </package>
        <package name="libvirt-docs" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-docs-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">8f7b06b2dbdb85fd784f217c292e0496e499838039f47d5f8a98d09c2da78165</sum>
        </package>
        <package name="libvirt-devel" version="9.5.0" release="7.el9_3.alma.1" epoch="0" arch="s390x" src="libvirt-9.5.0-7.el9_3.alma.1.src.rpm">
          <filename>libvirt-devel-9.5.0-7.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">e4f41a53662eef118f4e33b78c4634763fdf986bc3da71967593636c037da549</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6431</id>
    <title>Moderate: libfastjson security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libfastjson security update</summary>
    <description>The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects.

Security Fix(es):

* json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6431" id="RHSA-2023:6431" type="rhsa" title="RHSA-2023:6431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-12762" id="CVE-2020-12762" type="cve" title="CVE-2020-12762"/>
      <reference href="https://bugzilla.redhat.com/1835253" id="1835253" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6431.html" id="ALSA-2023:6431" type="self" title="ALSA-2023:6431"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libfastjson-devel" version="0.99.9" release="5.el9" epoch="0" arch="s390x" src="libfastjson-0.99.9-5.el9.src.rpm">
          <filename>libfastjson-devel-0.99.9-5.el9.s390x.rpm</filename>
          <sum type="sha256">a54b41774461638b18ea49dac35425f86bcf96c222d180aa60057880520a80ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6469</id>
    <title>Moderate: wireshark security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: RTPS dissector crash (CVE-2023-0666)
* wireshark: IEEE C37.118 Synchrophasor dissector crash (CVE-2023-0668)
* wireshark: Candump log file parser crash (CVE-2023-2855)
* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)
* wireshark: NetScaler file parser crash (CVE-2023-2858)
* wireshark: XRA dissector infinite loop (CVE-2023-2952)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6469" id="RHSA-2023:6469" type="rhsa" title="RHSA-2023:6469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0666" id="CVE-2023-0666" type="cve" title="CVE-2023-0666"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0668" id="CVE-2023-0668" type="cve" title="CVE-2023-0668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2855" id="CVE-2023-2855" type="cve" title="CVE-2023-2855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2856" id="CVE-2023-2856" type="cve" title="CVE-2023-2856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2858" id="CVE-2023-2858" type="cve" title="CVE-2023-2858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2952" id="CVE-2023-2952" type="cve" title="CVE-2023-2952"/>
      <reference href="https://bugzilla.redhat.com/2210822" id="2210822" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210824" id="2210824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210829" id="2210829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210832" id="2210832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210835" id="2210835" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211406" id="2211406" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6469.html" id="ALSA-2023:6469" type="self" title="ALSA-2023:6469"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="wireshark-devel" version="3.4.10" release="6.el9" epoch="1" arch="s390x" src="wireshark-3.4.10-6.el9.src.rpm">
          <filename>wireshark-devel-3.4.10-6.el9.s390x.rpm</filename>
          <sum type="sha256">7ef53c336d672a17d0fef285b3798f642e8f2bc61cefbec57646b9f59db4818b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6482</id>
    <title>Moderate: librabbitmq security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>librabbitmq security update</summary>
    <description>The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1.

Security Fix(es):

* rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6482" id="RHSA-2023:6482" type="rhsa" title="RHSA-2023:6482"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35789" id="CVE-2023-35789" type="cve" title="CVE-2023-35789"/>
      <reference href="https://bugzilla.redhat.com/2215762" id="2215762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6482.html" id="ALSA-2023:6482" type="self" title="ALSA-2023:6482"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="librabbitmq-devel" version="0.11.0" release="7.el9" epoch="0" arch="s390x" src="librabbitmq-0.11.0-7.el9.src.rpm">
          <filename>librabbitmq-devel-0.11.0-7.el9.s390x.rpm</filename>
          <sum type="sha256">d70cbea7c8c9b13f6e96a901d92552a02e47ebc8970045bf5022b1cac99c3d93</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6494</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:06:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.11 (3.11.5). (BZ#2210785)

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)
* python: file path truncation at \0 characters (CVE-2023-41105)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6494" id="RHSA-2023:6494" type="rhsa" title="RHSA-2023:6494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41105" id="CVE-2023-41105" type="cve" title="CVE-2023-41105"/>
      <reference href="https://bugzilla.redhat.com/2235795" id="2235795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6494.html" id="ALSA-2023:6494" type="self" title="ALSA-2023:6494"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="python3.11-idle" version="3.11.5" release="1.el9_3" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el9_3.src.rpm">
          <filename>python3.11-idle-3.11.5-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">588c6da823c55a09ae788d9d9612313c7897b22c04cb070c5e106df08a9afa69</sum>
        </package>
        <package name="python3.11-test" version="3.11.5" release="1.el9_3" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el9_3.src.rpm">
          <filename>python3.11-test-3.11.5-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">6a4146b3925c20e9a4039f089c91289864bb96fdabd7a19819f51a39e0c30aa0</sum>
        </package>
        <package name="python3.11-debug" version="3.11.5" release="1.el9_3" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el9_3.src.rpm">
          <filename>python3.11-debug-3.11.5-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">afa053b8fa2daf6784c3d5f5ac0039594358900836ca989767ff5ad76cbec80c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6518</id>
    <title>Moderate: flatpak security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>flatpak security, bug fix, and enhancement update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

The following packages have been upgraded to a later upstream version: flatpak (1.12.8). (BZ#2221792)

Security Fix(es):

* flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100)
* flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6518" id="RHSA-2023:6518" type="rhsa" title="RHSA-2023:6518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28100" id="CVE-2023-28100" type="cve" title="CVE-2023-28100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28101" id="CVE-2023-28101" type="cve" title="CVE-2023-28101"/>
      <reference href="https://bugzilla.redhat.com/2179219" id="2179219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179220" id="2179220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6518.html" id="ALSA-2023:6518" type="self" title="ALSA-2023:6518"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="flatpak-devel" version="1.12.8" release="1.el9" epoch="0" arch="s390x" src="flatpak-1.12.8-1.el9.src.rpm">
          <filename>flatpak-devel-1.12.8-1.el9.s390x.rpm</filename>
          <sum type="sha256">ff52968dceedd6794644ad2abb6a7a3ce5ecdd06927dc76f45abc28e095bc69c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6544</id>
    <title>Moderate: ghostscript security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 12:07:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security and bug fix update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: buffer overflow in base/sbcp.c leading to data corruption (CVE-2023-28879)
* ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS (CVE-2023-38559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6544" id="RHSA-2023:6544" type="rhsa" title="RHSA-2023:6544"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28879" id="CVE-2023-28879" type="cve" title="CVE-2023-28879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38559" id="CVE-2023-38559" type="cve" title="CVE-2023-38559"/>
      <reference href="https://bugzilla.redhat.com/2184585" id="2184585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224367" id="2224367" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6544.html" id="ALSA-2023:6544" type="self" title="ALSA-2023:6544"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="libgs-devel" version="9.54.0" release="13.el9" epoch="0" arch="s390x" src="ghostscript-9.54.0-13.el9.src.rpm">
          <filename>libgs-devel-9.54.0-13.el9.s390x.rpm</filename>
          <sum type="sha256">45e81f91dd078121ba29a9a8825e66ec4249c4255a00093eacd2d3a158c4a93d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6551</id>
    <title>Moderate: yajl security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6551" id="RHSA-2023:6551" type="rhsa" title="RHSA-2023:6551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33460" id="CVE-2023-33460" type="cve" title="CVE-2023-33460"/>
      <reference href="https://bugzilla.redhat.com/2221249" id="2221249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6551.html" id="ALSA-2023:6551" type="self" title="ALSA-2023:6551"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="yajl-devel" version="2.1.0" release="22.el9" epoch="0" arch="s390x" src="yajl-2.1.0-22.el9.src.rpm">
          <filename>yajl-devel-2.1.0-22.el9.s390x.rpm</filename>
          <sum type="sha256">e0b12e5ddba644cf95d81e850a699fef96901014e57397afce2080c458e61fdb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6566</id>
    <title>Moderate: libmicrohttpd security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:10:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libmicrohttpd security update</summary>
    <description>GNU libmicrohttpd is a small C library that makes it easy to run an HTTP server as part of another application.

Security Fix(es):

* libmicrohttpd: remote DoS (CVE-2023-27371)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6566" id="RHSA-2023:6566" type="rhsa" title="RHSA-2023:6566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27371" id="CVE-2023-27371" type="cve" title="CVE-2023-27371"/>
      <reference href="https://bugzilla.redhat.com/2174313" id="2174313" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6566.html" id="ALSA-2023:6566" type="self" title="ALSA-2023:6566"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libmicrohttpd-doc" version="0.9.72" release="5.el9" epoch="1" arch="noarch" src="libmicrohttpd-0.9.72-5.el9.src.rpm">
          <filename>libmicrohttpd-doc-0.9.72-5.el9.noarch.rpm</filename>
          <sum type="sha256">67390759e2ec13f61ba7f59dbe3cfaa36ab3d99119dee2bb683a6e76818003ec</sum>
        </package>
        <package name="libmicrohttpd-devel" version="0.9.72" release="5.el9" epoch="1" arch="s390x" src="libmicrohttpd-0.9.72-5.el9.src.rpm">
          <filename>libmicrohttpd-devel-0.9.72-5.el9.s390x.rpm</filename>
          <sum type="sha256">e82eb3bf13124ffe38c03fcdc7fb83d61a85092e7bb24038083505b81dc0cbd5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6575</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:17"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: null pointer dereference in LZWDecode() in libtiff/tif_lzw.c (CVE-2023-2731)
* libtiff: tiffcrop: null pointer dereference in TIFFClose() (CVE-2023-3316)
* libtiff: memory leak in tiffcrop.c (CVE-2023-3576)
* libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c (CVE-2023-26965)
* libtiff: Buffer Overflow in uv_encode() (CVE-2023-26966)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6575" id="RHSA-2023:6575" type="rhsa" title="RHSA-2023:6575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-26965" id="CVE-2023-26965" type="cve" title="CVE-2023-26965"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-26966" id="CVE-2023-26966" type="cve" title="CVE-2023-26966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2731" id="CVE-2023-2731" type="cve" title="CVE-2023-2731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3316" id="CVE-2023-3316" type="cve" title="CVE-2023-3316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3576" id="CVE-2023-3576" type="cve" title="CVE-2023-3576"/>
      <reference href="https://bugzilla.redhat.com/2207635" id="2207635" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215206" id="2215206" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2216080" id="2216080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218749" id="2218749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219340" id="2219340" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6575.html" id="ALSA-2023:6575" type="self" title="ALSA-2023:6575"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libtiff-tools" version="4.4.0" release="10.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-10.el9.src.rpm">
          <filename>libtiff-tools-4.4.0-10.el9.s390x.rpm</filename>
          <sum type="sha256">aad426332f56b4bbe03da114aaf43eae2bcceff2fc50a4f5066156e980da1734</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6621</id>
    <title>Moderate: protobuf-c security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf-c security update</summary>
    <description>The protobuf-c packages provide C bindings for Google's Protocol Buffers.

Security Fix(es):

* protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6621" id="RHSA-2023:6621" type="rhsa" title="RHSA-2023:6621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48468" id="CVE-2022-48468" type="cve" title="CVE-2022-48468"/>
      <reference href="https://bugzilla.redhat.com/2186673" id="2186673" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6621.html" id="ALSA-2023:6621" type="self" title="ALSA-2023:6621"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="protobuf-c-compiler" version="1.3.3" release="13.el9" epoch="0" arch="s390x" src="protobuf-c-1.3.3-13.el9.src.rpm">
          <filename>protobuf-c-compiler-1.3.3-13.el9.s390x.rpm</filename>
          <sum type="sha256">3eccabaa309eb648ae92d4fc0c5cf8c5fba8ef0c397aa7f4551a585e018de960</sum>
        </package>
        <package name="protobuf-c-devel" version="1.3.3" release="13.el9" epoch="0" arch="s390x" src="protobuf-c-1.3.3-13.el9.src.rpm">
          <filename>protobuf-c-devel-1.3.3-13.el9.s390x.rpm</filename>
          <sum type="sha256">57c1e56c7741e30b8e6bdc25b9351907681677022cc7cb7a5cc704f5dfa86e97</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6631</id>
    <title>Low: glib2 security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>glib2 security and bug fix update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: GVariant offset table entry size is not checked in is_normal() (CVE-2023-29499)
* glib: g_variant_byteswap() can take a long time with some non-normal inputs (CVE-2023-32611)
* glib: GVariant deserialisation does not match spec for non-normal data (CVE-2023-32665)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6631" id="RHSA-2023:6631" type="rhsa" title="RHSA-2023:6631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29499" id="CVE-2023-29499" type="cve" title="CVE-2023-29499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32611" id="CVE-2023-32611" type="cve" title="CVE-2023-32611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32665" id="CVE-2023-32665" type="cve" title="CVE-2023-32665"/>
      <reference href="https://bugzilla.redhat.com/2211827" id="2211827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211828" id="2211828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211829" id="2211829" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6631.html" id="ALSA-2023:6631" type="self" title="ALSA-2023:6631"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="glib2-static" version="2.68.4" release="11.el9" epoch="0" arch="s390x" src="glib2-2.68.4-11.el9.src.rpm">
          <filename>glib2-static-2.68.4-11.el9.s390x.rpm</filename>
          <sum type="sha256">ac92a0002e15da3d754c8bf4ab3adab228fcdbc3f97b049d335d7376c24509e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6632</id>
    <title>Low: shadow-utils security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>shadow-utils security and bug fix update</summary>
    <description>The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts. 

Security Fix(es):

* shadow-utils: possible password leak during passwd(1) change (CVE-2023-4641)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6632" id="RHSA-2023:6632" type="rhsa" title="RHSA-2023:6632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4641" id="CVE-2023-4641" type="cve" title="CVE-2023-4641"/>
      <reference href="https://bugzilla.redhat.com/2215945" id="2215945" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6632.html" id="ALSA-2023:6632" type="self" title="ALSA-2023:6632"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="shadow-utils-subid-devel" version="4.9" release="8.el9" epoch="2" arch="s390x" src="shadow-utils-4.9-8.el9.src.rpm">
          <filename>shadow-utils-subid-devel-4.9-8.el9.s390x.rpm</filename>
          <sum type="sha256">02000ade5890b4c7032f154f663f4a4e519ffa5b155f4525308fb0581e2ffb78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6659</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:06:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python3.9 (3.9.18). (BZ#2210783)

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6659" id="RHSA-2023:6659" type="rhsa" title="RHSA-2023:6659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6659.html" id="ALSA-2023:6659" type="self" title="ALSA-2023:6659"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="python3-debug" version="3.9.18" release="1.el9_3" epoch="0" arch="s390x" src="python3.9-3.9.18-1.el9_3.src.rpm">
          <filename>python3-debug-3.9.18-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">2a1f9405c5586fd5846ccaa7e839cc0864a8a4dc5168c412c5094014e8d6d110</sum>
        </package>
        <package name="python3-test" version="3.9.18" release="1.el9_3" epoch="0" arch="s390x" src="python3.9-3.9.18-1.el9_3.src.rpm">
          <filename>python3-test-3.9.18-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">bc1b391c3a0fb8cbedef825c7c978856388f8fb2ea841a7c88a0ed68ca95bb2e</sum>
        </package>
        <package name="python3-idle" version="3.9.18" release="1.el9_3" epoch="0" arch="s390x" src="python3.9-3.9.18-1.el9_3.src.rpm">
          <filename>python3-idle-3.9.18-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">f989e81084d7aba83be2af1ee5c4f06cb5da1f3d4693b3c102ab4d4679bab3de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6667</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-15 11:44:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190415)

Security Fix(es):

* samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)
* samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)
* samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)
* samba: spotlight server-side share path disclosure (CVE-2023-34968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6667" id="RHSA-2023:6667" type="rhsa" title="RHSA-2023:6667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2127" id="CVE-2022-2127" type="cve" title="CVE-2022-2127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34966" id="CVE-2023-34966" type="cve" title="CVE-2023-34966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34967" id="CVE-2023-34967" type="cve" title="CVE-2023-34967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34968" id="CVE-2023-34968" type="cve" title="CVE-2023-34968"/>
      <reference href="https://bugzilla.redhat.com/2222791" id="2222791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222793" id="2222793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222794" id="2222794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222795" id="2222795" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6667.html" id="ALSA-2023:6667" type="self" title="ALSA-2023:6667"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="samba-test-libs" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-test-libs-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">15566e90ed87842dea327b6978e7ef724bb7c8213800801a19806690a1107d3a</sum>
        </package>
        <package name="libsmbclient-devel" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>libsmbclient-devel-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">319f867395d406b7d2b082fef3b2c2d33583a37f94a745598957b4e85f6445b1</sum>
        </package>
        <package name="samba-devel" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-devel-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">41e0494a2329fb08fe497bde152fd2d935a43214a5d2211a49cbff67e9350856</sum>
        </package>
        <package name="samba-pidl" version="4.18.6" release="100.el9" epoch="0" arch="noarch" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-pidl-4.18.6-100.el9.noarch.rpm</filename>
          <sum type="sha256">612991a14c95fa2121a221b922b765cc7bec8b2556c61d9b4fec0ed42bae7173</sum>
        </package>
        <package name="libwbclient-devel" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>libwbclient-devel-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">6af8b90d07cf1c8c86ba4e7b46f580852b23c4169c05424b23cd0a29d1840f60</sum>
        </package>
        <package name="python3-samba-devel" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>python3-samba-devel-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">9c8abda548920cf715e090e43f1d3865c2041435b6f007ae91861fab2a54416f</sum>
        </package>
        <package name="python3-samba-test" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>python3-samba-test-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">bfabbea0a41d178f56fa08659e17458a3e37ec837911a4a4b8d48b689190d58f</sum>
        </package>
        <package name="samba-test" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>samba-test-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">c0f5ddf91453c32c02cb08e5ff78744c39a67973c9f86b0871d0165706b9873b</sum>
        </package>
        <package name="libnetapi-devel" version="4.18.6" release="100.el9" epoch="0" arch="s390x" src="samba-4.18.6-100.el9.src.rpm">
          <filename>libnetapi-devel-4.18.6-100.el9.s390x.rpm</filename>
          <sum type="sha256">e858ef490d7ac979e46835656268597a4d36e774446620b23e7db748022d67b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6685</id>
    <title>Low: tpm2-tss security and enhancement update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>tpm2-tss security and enhancement update</summary>
    <description>The tpm2-tss packages provide the Intel implementation of the Trusted Platform Module (TPM) 2.0 System API library. This library enables programs to interact with TPM 2.0 devices

Security Fix(es):

* tpm2-tss: Buffer Overlow in TSS2_RC_Decode (CVE-2023-22745)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6685" id="RHSA-2023:6685" type="rhsa" title="RHSA-2023:6685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22745" id="CVE-2023-22745" type="cve" title="CVE-2023-22745"/>
      <reference href="https://bugzilla.redhat.com/2162610" id="2162610" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6685.html" id="ALSA-2023:6685" type="self" title="ALSA-2023:6685"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="tpm2-tss-devel" version="3.2.2" release="2.el9" epoch="0" arch="s390x" src="tpm2-tss-3.2.2-2.el9.src.rpm">
          <filename>tpm2-tss-devel-3.2.2-2.el9.s390x.rpm</filename>
          <sum type="sha256">542b6cdddcf42d38bf78989ddf982eaf9bfe44375494a3c67df1e5d891c5c575</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6705</id>
    <title>Low: procps-ng security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>procps-ng security and bug fix update</summary>
    <description>The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch, and pwdx.

Security Fix(es):

* procps: ps buffer overflow (CVE-2023-4016)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6705" id="RHSA-2023:6705" type="rhsa" title="RHSA-2023:6705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4016" id="CVE-2023-4016" type="cve" title="CVE-2023-4016"/>
      <reference href="https://bugzilla.redhat.com/2228494" id="2228494" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6705.html" id="ALSA-2023:6705" type="self" title="ALSA-2023:6705"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="procps-ng-devel" version="3.3.17" release="13.el9" epoch="0" arch="s390x" src="procps-ng-3.3.17-13.el9.src.rpm">
          <filename>procps-ng-devel-3.3.17-13.el9.s390x.rpm</filename>
          <sum type="sha256">1ad07de17e23b32d83157d5d332a7ed12ef27b609894b10d24a929a7e1563067</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6707</id>
    <title>Moderate: avahi security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:07:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468)
* avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames (CVE-2021-3502)
* avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6707" id="RHSA-2023:6707" type="rhsa" title="RHSA-2023:6707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3468" id="CVE-2021-3468" type="cve" title="CVE-2021-3468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3502" id="CVE-2021-3502" type="cve" title="CVE-2021-3502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1981" id="CVE-2023-1981" type="cve" title="CVE-2023-1981"/>
      <reference href="https://bugzilla.redhat.com/1939614" id="1939614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1946914" id="1946914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185911" id="2185911" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6707.html" id="ALSA-2023:6707" type="self" title="ALSA-2023:6707"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="avahi-compat-libdns_sd-devel" version="0.8" release="15.el9" epoch="0" arch="s390x" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.8-15.el9.s390x.rpm</filename>
          <sum type="sha256">061986fb4d58a81a42217de80a874227233fc6cbf0b9cda61dd46b66104f2b86</sum>
        </package>
        <package name="avahi-devel" version="0.8" release="15.el9" epoch="0" arch="s390x" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-devel-0.8-15.el9.s390x.rpm</filename>
          <sum type="sha256">161b566b9c98ccc4e617082a7ce21e6e65d78194ddafd325b27db46a2f9d6d74</sum>
        </package>
        <package name="avahi-compat-libdns_sd" version="0.8" release="15.el9" epoch="0" arch="s390x" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-0.8-15.el9.s390x.rpm</filename>
          <sum type="sha256">6483c686c5296b39bbbea1c8d71ecf87256254e98f5163d22e9af81144804f67</sum>
        </package>
        <package name="avahi-compat-howl-devel" version="0.8" release="15.el9" epoch="0" arch="s390x" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-compat-howl-devel-0.8-15.el9.s390x.rpm</filename>
          <sum type="sha256">bf69e85ad33457cb1fc9aa471ee079ec3def58528f896bb26e8b161928e7cdb2</sum>
        </package>
        <package name="avahi-compat-howl" version="0.8" release="15.el9" epoch="0" arch="s390x" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-compat-howl-0.8-15.el9.s390x.rpm</filename>
          <sum type="sha256">ed3f7d75d4192abf3a8b7421e614685764c6518716f74009723983109e6cb259</sum>
        </package>
        <package name="avahi-glib-devel" version="0.8" release="15.el9" epoch="0" arch="s390x" src="avahi-0.8-15.el9.src.rpm">
          <filename>avahi-glib-devel-0.8-15.el9.s390x.rpm</filename>
          <sum type="sha256">f0b18601d41a7a6717888e63eae6fd0805e3ca864aa75174795e5bcb76dadfae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6712</id>
    <title>Moderate: python-wheel security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:12:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-wheel security update</summary>
    <description>Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427.

Security Fix(es):

* python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli (CVE-2022-40898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6712" id="RHSA-2023:6712" type="rhsa" title="RHSA-2023:6712"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40898" id="CVE-2022-40898" type="cve" title="CVE-2022-40898"/>
      <reference href="https://bugzilla.redhat.com/2165864" id="2165864" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6712.html" id="ALSA-2023:6712" type="self" title="ALSA-2023:6712"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="python3-wheel-wheel" version="0.36.2" release="8.el9" epoch="1" arch="noarch" src="python-wheel-0.36.2-8.el9.src.rpm">
          <filename>python3-wheel-wheel-0.36.2-8.el9.noarch.rpm</filename>
          <sum type="sha256">3d0309b1e2967adc653729a9f88ae803d2b08b950de795181354f1390ee081c9</sum>
        </package>
        <package name="python3-wheel" version="0.36.2" release="8.el9" epoch="1" arch="noarch" src="python-wheel-0.36.2-8.el9.src.rpm">
          <filename>python3-wheel-0.36.2-8.el9.noarch.rpm</filename>
          <sum type="sha256">3e81c4451b2cefe7a23125e40c7b73abefee7630a64b19b57cce91adb41850a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6732</id>
    <title>Important: ghostscript security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:05:27"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6732" id="RHSA-2023:6732" type="rhsa" title="RHSA-2023:6732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43115" id="CVE-2023-43115" type="cve" title="CVE-2023-43115"/>
      <reference href="https://bugzilla.redhat.com/2241108" id="2241108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6732.html" id="ALSA-2023:6732" type="self" title="ALSA-2023:6732"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="libgs-devel" version="9.54.0" release="14.el9_3" epoch="0" arch="s390x" src="ghostscript-9.54.0-14.el9_3.src.rpm">
          <filename>libgs-devel-9.54.0-14.el9_3.s390x.rpm</filename>
          <sum type="sha256">2bce2504a1040c7c34df3b23a83b936a7d9adce36280b3f4c52702b27ea746c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6738</id>
    <title>Moderate: java-21-openjdk security and bug fix update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:08:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security and bug fix update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 21.0.0 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 21.0.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true.
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 20.0.0 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 20.0.1, increases it to 16 MB. (AlmaLinux-14954)
* When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-14962)
* Installing the same java-21-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-21-openjdk-headless package. This prevented the use of the dynamic dump feature, because the checksum in the archive would be different on each system. This release resolves this issue by using the .jsa files generated during the initial build. (AlmaLinux-14946)
* The /usr/bin/jfr alternative is now owned by the java-21-openjdk package. (AlmaLinux-14959)
* The jcmd tool is now provided by the java-21-openjdk-headless package, rather than java-21-openjdk-devel, to make it more accessible. (AlmaLinux-14948)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6738" id="RHSA-2023:6738" type="rhsa" title="RHSA-2023:6738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6738.html" id="ALSA-2023:6738" type="self" title="ALSA-2023:6738"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1837fe04241b6026fa0ff82c203c29b4c7b9ac9f953c385f6b0739d968179766</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">18645bb12fbd375a60a10cc3b04e43a5c07747cbc3448fd711edba44c5ffa110</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">28dc8924b6ec0790c43585f649d44041e52aeb1df4c8e773c5c56e3c6b0c363f</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">3d56cda6a3732f964ff1b43e7600fa1a8dc024cf059ff20f1b48201d324d6137</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">7d38b5057f47144b9411fea5d567f7ab94e70b130f12087dbc9d348e083cbb77</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">9a84caa0b50fa055f23ba106b08d06018a1779de3f355c9a32aecc4d0b905577</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.1.0.12" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.1.0.12-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c2b6864aefab49e91cab7c3c6a9857442fef1900e09351c20d80cbdc62e90751</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6744</id>
    <title>Moderate: samba security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:11:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)
* samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)
* samba: "rpcecho" development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6744" id="RHSA-2023:6744" type="rhsa" title="RHSA-2023:6744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3961" id="CVE-2023-3961" type="cve" title="CVE-2023-3961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4091" id="CVE-2023-4091" type="cve" title="CVE-2023-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42669" id="CVE-2023-42669" type="cve" title="CVE-2023-42669"/>
      <reference href="https://bugzilla.redhat.com/2241881" id="2241881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241882" id="2241882" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241884" id="2241884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6744.html" id="ALSA-2023:6744" type="self" title="ALSA-2023:6744"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="python3-samba-devel" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>python3-samba-devel-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">0ff0bde74564a762fb780d645061c78cb8f83c452df514bda6ba1b4705fb0794</sum>
        </package>
        <package name="samba-test-libs" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-test-libs-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">1b3e5d5ed293890c0dc85248e0808255ad6ca2ae566b5ac789ed232dd18db293</sum>
        </package>
        <package name="libwbclient-devel" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>libwbclient-devel-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">30670e4f12d4e8a51bce4da1d5c0e807de7177a622cfd10b67fea60bdef5b97a</sum>
        </package>
        <package name="python3-samba-test" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>python3-samba-test-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">4036b49858977245e85c9c4b911ec6d00dd04270b7a54c884b9786899e3cf608</sum>
        </package>
        <package name="libsmbclient-devel" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>libsmbclient-devel-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">4932aa729d8690b79dcbbb54c00f091114e7e956f6bfe2fefcfd8a86f029d542</sum>
        </package>
        <package name="libnetapi-devel" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>libnetapi-devel-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">842ca0451f978bc256bff23a3bdc3c3a9014bdcf099ff2af54f8baa237b4f6bd</sum>
        </package>
        <package name="samba-pidl" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="noarch" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-pidl-4.18.6-101.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">a354085fbc28e8f451498a06fa2c351712ff1a40a027007331bfc331b30c9272</sum>
        </package>
        <package name="samba-devel" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-devel-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">b108c9c56bc2a22149a33af97d3932bf904515d97c892cb86513bf5df55155ef</sum>
        </package>
        <package name="samba-test" version="4.18.6" release="101.el9_3.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-101.el9_3.alma.1.src.rpm">
          <filename>samba-test-4.18.6-101.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">b4f17305ac21fb04c45b0194a3f6fea87a9528e23d14e6bcda427e2e32f4b069</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6746</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2023-11-07 00:00:00"/>
    <updated date="2023-11-14 12:06:00"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6746" id="RHSA-2023:6746" type="rhsa" title="RHSA-2023:6746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-6746.html" id="ALSA-2023:6746" type="self" title="ALSA-2023:6746"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_2_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_2_default</name>
        <package name="nghttp2" version="1.43.0" release="5.el9_3.1" epoch="0" arch="s390x" src="nghttp2-1.43.0-5.el9_3.1.src.rpm">
          <filename>nghttp2-1.43.0-5.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">3a7bdbddeb6ce6adf9e3447266cd55eee62606a8d5597b40acb22fc9d84c391c</sum>
        </package>
        <package name="libnghttp2-devel" version="1.43.0" release="5.el9_3.1" epoch="0" arch="s390x" src="nghttp2-1.43.0-5.el9_3.1.src.rpm">
          <filename>libnghttp2-devel-1.43.0-5.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">96e5384458b3113d7cc72816d7754f86f4adf0580eec7fdae3fa6480981b5e49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7253</id>
    <title>Moderate: dotnet8.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-16 16:42:43"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7253" id="RHSA-2023:7253" type="rhsa" title="RHSA-2023:7253"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7253.html" id="ALSA-2023:7253" type="self" title="ALSA-2023:7253"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.100" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.100-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">4ef64151c0bcda0873a83fa7d826d8027db1cde033346b216b4436a9b425458b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7255</id>
    <title>Moderate: dotnet7.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-16 14:30:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.114 and .NET Runtime 7.0.14.
  

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7255" id="RHSA-2023:7255" type="rhsa" title="RHSA-2023:7255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7255.html" id="ALSA-2023:7255" type="self" title="ALSA-2023:7255"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.114" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.114-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">e5fa0ce232c876b6eca82dd853a4a21b80d7cbe7b748bf71ee82b9baf474109f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7257</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-16 16:32:57"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.125 and .NET Runtime 6.0.25.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7257" id="RHSA-2023:7257" type="rhsa" title="RHSA-2023:7257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7257.html" id="ALSA-2023:7257" type="self" title="ALSA-2023:7257"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.125" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el9_3.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.125-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">00fe41cfb6c362d7055cd75ad528cc169a828911410f09e6e3897394fe1b9cd3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7784</id>
    <title>Important: postgresql security update</title>
    <issued date="2023-12-13 00:00:00"/>
    <updated date="2023-12-14 11:47:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869)
* postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868)
* postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417)
* postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7784" id="RHSA-2023:7784" type="rhsa" title="RHSA-2023:7784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39417" id="CVE-2023-39417" type="cve" title="CVE-2023-39417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5868" id="CVE-2023-5868" type="cve" title="CVE-2023-5868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5869" id="CVE-2023-5869" type="cve" title="CVE-2023-5869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5870" id="CVE-2023-5870" type="cve" title="CVE-2023-5870"/>
      <reference href="https://bugzilla.redhat.com/2228111" id="2228111" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247168" id="2247168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247169" id="2247169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247170" id="2247170" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7784.html" id="ALSA-2023:7784" type="self" title="ALSA-2023:7784"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="postgresql-server-devel" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-server-devel-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">07fdd1d83092c0c6938ec4db0a43ca526a637eefbd0f842147c4190ebd3a4efc</sum>
        </package>
        <package name="postgresql-docs" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-docs-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">0f569769ab618d389278a88ce9a5d055b5f4d485663e971d342feb061305c3f0</sum>
        </package>
        <package name="postgresql-static" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-static-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">6412eb5efffe2d8e76dc616410fdbeae66b36ad61365357a91998c0d101add62</sum>
        </package>
        <package name="postgresql-private-devel" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-private-devel-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">6e6b4556edb6a615794c2fa7cdd3db6df0c4a8c220568fdc5e375a694db15d60</sum>
        </package>
        <package name="postgresql-test" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-test-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">92cb6d83e44db4b5bcc0d6b6aa85934b63f5484c06dd95a5d5b8b4309808f013</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.13" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.13-1.el9_3.src.rpm">
          <filename>postgresql-upgrade-devel-13.13-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">b44d19397742db59013a0427a94e9f2820b4efd948babe8fb262d94bdae40a34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7791</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2023-12-13 00:00:00"/>
    <updated date="2023-12-14 09:39:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer: AV1 codec parser heap-based buffer overflow (CVE-2023-44429)
* gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7791" id="RHSA-2023:7791" type="rhsa" title="RHSA-2023:7791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44429" id="CVE-2023-44429" type="cve" title="CVE-2023-44429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44446" id="CVE-2023-44446" type="cve" title="CVE-2023-44446"/>
      <reference href="https://bugzilla.redhat.com/2250247" id="2250247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250249" id="2250249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-7791.html" id="ALSA-2023:7791" type="self" title="ALSA-2023:7791"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.22.1" release="2.el9_3" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.1-2.el9_3.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.1-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">e1472557ce59794b671d66409200705c26c2d54eb8fe6ea23265f85e73e20893</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0141</id>
    <title>Moderate: ipa security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 22:25:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* ipa: Invalid CSRF protection (CVE-2023-5455)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0141" id="RHSA-2024:0141" type="rhsa" title="RHSA-2024:0141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5455" id="CVE-2023-5455" type="cve" title="CVE-2023-5455"/>
      <reference href="https://bugzilla.redhat.com/2242828" id="2242828" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0141.html" id="ALSA-2024:0141" type="self" title="ALSA-2024:0141"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="python3-ipatests" version="4.10.2" release="5.el9_3.alma.1" epoch="0" arch="noarch" src="ipa-4.10.2-5.el9_3.alma.1.src.rpm">
          <filename>python3-ipatests-4.10.2-5.el9_3.alma.1.noarch.rpm</filename>
          <sum type="sha256">68d1ad015ab26a9ad0dbf8959a913b4646f9c03e6148457726c5c1540c1443b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0151</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 16:35:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0151" id="RHSA-2024:0151" type="rhsa" title="RHSA-2024:0151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0151.html" id="ALSA-2024:0151" type="self" title="ALSA-2024:0151"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.115" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.115-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">f3f0b5387fa2414c4f7cdc02683c992f3269559beda608f4d88b5eea950b214a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0152</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 16:40:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.101 and .NET Runtime 8.0.1.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0152" id="RHSA-2024:0152" type="rhsa" title="RHSA-2024:0152"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0152.html" id="ALSA-2024:0152" type="self" title="ALSA-2024:0152"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.101" release="1.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.101-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">9cb6e118aa018b2c1cdd6bd34f4d98bfe2796757b2341ebb82553592d51178bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0156</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 22:19:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0156" id="RHSA-2024:0156" type="rhsa" title="RHSA-2024:0156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0156.html" id="ALSA-2024:0156" type="self" title="ALSA-2024:0156"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.126" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el9_3.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.126-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">904efa1dcfa501caf5edf947ac603741244c7f3115baa368eb7c51d29ffdf7c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0249</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-01-20 14:58:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0249" id="RHSA-2024:0249" type="rhsa" title="RHSA-2024:0249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0249.html" id="ALSA-2024:0249" type="self" title="ALSA-2024:0249"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">102077c6fb71c94fce915e78196ff36df08fa5bc50fc3896fb07e38c8b2e3a38</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1dce5c595b4654c4fcc51b35bc13105e9e1e6cbeafe2c3b10cbc99c9b31b9adf</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">38bfab24f06d5b39c52af331773e665657bc9feb65ad83aac90d9c8d9f8fae40</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">5cb97e82b3f1eb8edcb2c5e9fcc68ad7237b4688a178b907ea999720d63a4a4e</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">8600893e2a7de9283e767b21efcfd8b534c206f8b883b65e22781a99b05941a1</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">91ff3d538e29c563a3012e13f8ee1290b7c217d60d7be3b667c1f7db009a93ee</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.2.0.13" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.2.0.13-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a108701b94de172eb512944bf4aadfac4c44bddc868aea21ad91d9d943ebd53a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0266</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2024-01-18 00:00:00"/>
    <updated date="2024-01-20 14:46:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0266" id="RHSA-2024:0266" type="rhsa" title="RHSA-2024:0266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20926" id="CVE-2024-20926" type="cve" title="CVE-2024-20926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257850" id="2257850" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0266.html" id="ALSA-2024:0266" type="self" title="ALSA-2024:0266"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">309119b04af1c15226706cb2e304eb922a41509f730aa8cb784311c3fac3d659</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">75dcfcd7927b7358be7c4ba35b28b9b1f087391099feb7ac4f5f67c4ae7a7c69</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">8786028d22f7a5b00823798b9ac24869577ae46d738b7ac6cc0f12b72e49a67e</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">99b329ad562c8b41d384bfbc51efbd1a78cd565636ce1404e9afb4622d8540b0</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">c4cb57ef3536cef1344103619480809a99da8b622902330997bc2b9db36679ef</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">d24cca7919b3078fcc6385c0905bc1caab9cddb173eb88c0e10aea7b2d78d546</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.22.0.7" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.22.0.7-2.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.22.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">e9541ac9fd5102506f5302c6e1eb9572b64fc294da5d4c58f879ce888ededaf2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0267</id>
    <title>Important: java-17-openjdk security and bug fix update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-01-20 14:39:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: incorrect handling of ZIP files with duplicate entries (8276123) (CVE-2024-20932)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-13930, AlmaLinux-13931, AlmaLinux-13934, AlmaLinux-13935)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0267" id="RHSA-2024:0267" type="rhsa" title="RHSA-2024:0267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20932" id="CVE-2024-20932" type="cve" title="CVE-2024-20932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257720" id="2257720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0267.html" id="ALSA-2024:0267" type="self" title="ALSA-2024:0267"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">30ad63524f1a10eb5a4579d20c9bc4eb50ba65e6df2535671c6ced69351a47b7</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">484b1a06c8752ab32c2936216a89f1bbf7b00dcdfb4e936434906f60a8215508</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">7320686c183ad961a7710f1ce28ab22bafc5be01a8d00478b959b890ff2e7670</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">77acc0ba22440fbab3eb84ad996cc83863a54dd285d0307959e66994162ba4e3</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">b39210e7d30417553ffec565864ffac05bbaaea1de2718938d5f0e124f163ce3</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">b73506cc1486c8c7960ab0708c36f3296208d334a668260977c75d7c07ce97e2</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.10.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.10.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.10.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">c6a75935a8a5c516bdcfb5d6fefb81cd18c17cd33a6eab56e7e59faf9aa5cb09</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0466</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-01-25 00:00:00"/>
    <updated date="2024-01-25 21:26:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0466" id="RHSA-2024:0466" type="rhsa" title="RHSA-2024:0466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0466.html" id="ALSA-2024:0466" type="self" title="ALSA-2024:0466"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="python3-test" version="3.9.18" release="1.el9_3.1" epoch="0" arch="s390x" src="python3.9-3.9.18-1.el9_3.1.src.rpm">
          <filename>python3-test-3.9.18-1.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">455aa996df7b20c448f547d4385445e08b7cc13146353a76164e473e5447567d</sum>
        </package>
        <package name="python3-debug" version="3.9.18" release="1.el9_3.1" epoch="0" arch="s390x" src="python3.9-3.9.18-1.el9_3.1.src.rpm">
          <filename>python3-debug-3.9.18-1.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">56b794393df1630116b7ead5b7e32519c90575a548706ba33873b637de0a87d9</sum>
        </package>
        <package name="python3-idle" version="3.9.18" release="1.el9_3.1" epoch="0" arch="s390x" src="python3.9-3.9.18-1.el9_3.1.src.rpm">
          <filename>python3-idle-3.9.18-1.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">ae129f9247ff993e6e171997b1e4f01cd7c6dd793463fef792fa093688a07860</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0805</id>
    <title>Important: dotnet7.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 09:17:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0805" id="RHSA-2024:0805" type="rhsa" title="RHSA-2024:0805"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0805.html" id="ALSA-2024:0805" type="self" title="ALSA-2024:0805"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.116" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.116-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">c355e45af210d06ee38407d87e63612369953d8a46fd24cdb0fd9784d53f9a02</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0807</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 09:13:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0807" id="RHSA-2024:0807" type="rhsa" title="RHSA-2024:0807"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0807.html" id="ALSA-2024:0807" type="self" title="ALSA-2024:0807"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.127" release="1.el9_3" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el9_3.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.127-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">17099d2392fd7683b2f8f34a01ab41b4e231450cb664a33e9b4892e02270c45d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0848</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-02-15 00:00:00"/>
    <updated date="2024-02-16 11:50:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0848" id="RHSA-2024:0848" type="rhsa" title="RHSA-2024:0848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0848.html" id="ALSA-2024:0848" type="self" title="ALSA-2024:0848"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.102" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.102-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">ab115025e973401cdde2633a6c8892c5a898e129df074c38da94fa4d62214cdf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0951</id>
    <title>Important: postgresql security update</title>
    <issued date="2024-02-22 00:00:00"/>
    <updated date="2024-02-28 16:06:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0951" id="RHSA-2024:0951" type="rhsa" title="RHSA-2024:0951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0985" id="CVE-2024-0985" type="cve" title="CVE-2024-0985"/>
      <reference href="https://bugzilla.redhat.com/2263384" id="2263384" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0951.html" id="ALSA-2024:0951" type="self" title="ALSA-2024:0951"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="postgresql-private-devel" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-private-devel-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">1e4710c786b97e322bd298a33fb73c12bf3d2236e03f2c86ecaa366c2c874d53</sum>
        </package>
        <package name="postgresql-static" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-static-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">47233ad72c32235e2d5013e2f78f077980a7273737b654d73be30d6cc2abae89</sum>
        </package>
        <package name="postgresql-docs" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-docs-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">47a7f078d5284fff7ed5b1dff03db7620dfda4e75d56ae502169d46d412afc69</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-upgrade-devel-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">67be39e2d184c2a6a632e0ac27b430554d94ca04ab2ab1474b997698466e1dc8</sum>
        </package>
        <package name="postgresql-server-devel" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-server-devel-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">8540ccd4d235375702eff5f34f8c985b14537b8837d418c98f518eb38f134f82</sum>
        </package>
        <package name="postgresql-test" version="13.14" release="1.el9_3" epoch="0" arch="s390x" src="postgresql-13.14-1.el9_3.src.rpm">
          <filename>postgresql-test-13.14-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">f36ac92b038a167fa4aeea7616896b1c7e5d3553cba86291fbdc30aa35f9c088</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0977</id>
    <title>Important: unbound security update</title>
    <issued date="2024-02-26 00:00:00"/>
    <updated date="2024-02-28 14:41:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. 

Security Fix(es):

* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0977" id="RHSA-2024:0977" type="rhsa" title="RHSA-2024:0977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-0977.html" id="ALSA-2024:0977" type="self" title="ALSA-2024:0977"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="unbound-devel" version="1.16.2" release="3.el9_3.1" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9_3.1.src.rpm">
          <filename>unbound-devel-1.16.2-3.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">a7b8df736afa4509b06004c3d2091edfeddd2e9311fdbe8c8a028399a332b1b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10274</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-11-26 00:00:00"/>
    <updated date="2024-12-03 07:57:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009)
  * kernel: USB: serial: mos7840: fix crash on resume (CVE-2024-42244)
  * kernel: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CVE-2024-50226)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10274" id="RHSA-2024:10274" type="rhsa" title="RHSA-2024:10274"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41009" id="CVE-2024-41009" type="cve" title="CVE-2024-41009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42244" id="CVE-2024-42244" type="cve" title="CVE-2024-42244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50226" id="CVE-2024-50226" type="cve" title="CVE-2024-50226"/>
      <reference href="https://bugzilla.redhat.com/2298412" id="2298412" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324876" id="2324876" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10274.html" id="ALSA-2024:10274" type="self" title="ALSA-2024:10274"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="libperf" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>libperf-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">ac9a48dd054bb01bed2790ceff2d8686e3c3c3b3c7022841daf1634d46751421</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-cross-headers-5.14.0-503.15.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">fcf26bc5494e9de85e485c780048a4ca514e3e311c463d0728c0be5d0cafad98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1075</id>
    <title>Important: edk2 security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-05 14:53:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* edk2: Buffer overflow in the DHCPv6 client via a long Server ID option (CVE-2023-45230)
* edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message (CVE-2023-45234)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1075" id="RHSA-2024:1075" type="rhsa" title="RHSA-2024:1075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45230" id="CVE-2023-45230" type="cve" title="CVE-2023-45230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45234" id="CVE-2023-45234" type="cve" title="CVE-2023-45234"/>
      <reference href="https://bugzilla.redhat.com/2258685" id="2258685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258697" id="2258697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1075.html" id="ALSA-2024:1075" type="self" title="ALSA-2024:1075"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="edk2-ovmf" version="20230524" release="4.el9_3.2.alma" epoch="0" arch="noarch" src="edk2-20230524-4.el9_3.2.alma.src.rpm">
          <filename>edk2-ovmf-20230524-4.el9_3.2.alma.noarch.rpm</filename>
          <sum type="sha256">672357e5f22af5021147da1e6ea2940970361d3219b3256dc24010fdaeeb1424</sum>
        </package>
        <package name="edk2-tools-doc" version="20230524" release="4.el9_3.2.alma" epoch="0" arch="noarch" src="edk2-20230524-4.el9_3.2.alma.src.rpm">
          <filename>edk2-tools-doc-20230524-4.el9_3.2.alma.noarch.rpm</filename>
          <sum type="sha256">bfcb0f5d6e03f7d8b84272a53664e90bac1a421417262c4e9b2f8eefe207350d</sum>
        </package>
        <package name="edk2-aarch64" version="20230524" release="4.el9_3.2.alma" epoch="0" arch="noarch" src="edk2-20230524-4.el9_3.2.alma.src.rpm">
          <filename>edk2-aarch64-20230524-4.el9_3.2.alma.noarch.rpm</filename>
          <sum type="sha256">c344e31df64e7b01343cb0aed155d8145237772f7f844a227dd8eda235c3368c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10791</id>
    <title>Important: postgresql security update</title>
    <issued date="2024-12-04 00:00:00"/>
    <updated date="2024-12-05 14:23:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978)
  * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979)
  * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10791" id="RHSA-2024:10791" type="rhsa" title="RHSA-2024:10791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10976" id="CVE-2024-10976" type="cve" title="CVE-2024-10976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10978" id="CVE-2024-10978" type="cve" title="CVE-2024-10978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10979" id="CVE-2024-10979" type="cve" title="CVE-2024-10979"/>
      <reference href="https://bugzilla.redhat.com/2326251" id="2326251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326253" id="2326253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2326263" id="2326263" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10791.html" id="ALSA-2024:10791" type="self" title="ALSA-2024:10791"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="postgresql-server-devel" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-server-devel-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">0ce6c80044679be8fa58951a296638ee82e94a406b5f14025556104298d93761</sum>
        </package>
        <package name="postgresql-static" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-static-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">1a15480f15fbd090446c6f8d432d0e44048f2c5a986d06b56f7cd2b486476cd8</sum>
        </package>
        <package name="postgresql-private-devel" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-private-devel-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">4c570cdb43d27d988847ddfb3d71f52fc54ec84b27876d5591381b18b1194a3f</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-upgrade-devel-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">75d71c57236ff3ba202e56afbe4392a395fb47b7fe62029eb0e7ade690215efb</sum>
        </package>
        <package name="postgresql-docs" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-docs-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">8b99b0432f1344751ac1dd700d3885f9af33eb3a609400512cdb82c2e769692a</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.18" release="1.el9_5" epoch="0" arch="noarch" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-test-rpm-macros-13.18-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">8e7546673e90d6d2cf20b6956f17bd1e184001032394a5fb82dfcd5ef8e622ee</sum>
        </package>
        <package name="postgresql-test" version="13.18" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.18-1.el9_5.src.rpm">
          <filename>postgresql-test-13.18-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">ef5205daacfc5a7f100479e43649d2e6590794789e63ac754cf0b871e9fb86ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10858</id>
    <title>Important: ruby security update</title>
    <issued date="2024-12-05 00:00:00"/>
    <updated date="2024-12-09 09:38:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ruby security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * rexml: REXML ReDoS vulnerability (CVE-2024-49761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10858" id="RHSA-2024:10858" type="rhsa" title="RHSA-2024:10858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49761" id="CVE-2024-49761" type="cve" title="CVE-2024-49761"/>
      <reference href="https://bugzilla.redhat.com/2322153" id="2322153" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10858.html" id="ALSA-2024:10858" type="self" title="ALSA-2024:10858"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="ruby-doc" version="3.0.7" release="163.el9_5" epoch="0" arch="noarch" src="ruby-3.0.7-163.el9_5.src.rpm">
          <filename>ruby-doc-3.0.7-163.el9_5.noarch.rpm</filename>
          <sum type="sha256">7485aeb0e6755d661e1ec91aaf7d312c6b374400a15cfc3836f7fa8b35c81c0e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10939</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-12-11 00:00:00"/>
    <updated date="2024-12-16 15:05:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
  * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)
  * kernel: iommu: Restore lost return in iommu_report_device_fault() (CVE-2024-44994)
  * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)
  * kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695)
  * kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949)
  * kernel: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CVE-2024-50251)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10939" id="RHSA-2024:10939" type="rhsa" title="RHSA-2024:10939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26615" id="CVE-2024-26615" type="cve" title="CVE-2024-26615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43854" id="CVE-2024-43854" type="cve" title="CVE-2024-43854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44994" id="CVE-2024-44994" type="cve" title="CVE-2024-44994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45018" id="CVE-2024-45018" type="cve" title="CVE-2024-45018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46695" id="CVE-2024-46695" type="cve" title="CVE-2024-46695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49949" id="CVE-2024-49949" type="cve" title="CVE-2024-49949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50251" id="CVE-2024-50251" type="cve" title="CVE-2024-50251"/>
      <reference href="https://bugzilla.redhat.com/2267355" id="2267355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309857" id="2309857" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311715" id="2311715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312083" id="2312083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320505" id="2320505" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324886" id="2324886" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10939.html" id="ALSA-2024:10939" type="self" title="ALSA-2024:10939"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="libperf" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>libperf-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">29038143a513709188e00721377c2135b27f44c9815e3f2b1c89f154a17153a0</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-cross-headers-5.14.0-503.16.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">74d31f246e6f767e50eb88ab86d30cb6034654433b5e46f72401c349736a85e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10978</id>
    <title>Important: python3.12 security update</title>
    <issued date="2024-12-12 00:00:00"/>
    <updated date="2024-12-16 14:45:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10978" id="RHSA-2024:10978" type="rhsa" title="RHSA-2024:10978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12254" id="CVE-2024-12254" type="cve" title="CVE-2024-12254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2330804" id="2330804" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10978.html" id="ALSA-2024:10978" type="self" title="ALSA-2024:10978"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="python3.12-debug" version="3.12.5" release="2.el9_5.2" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-debug-3.12.5-2.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">4ee8d32f69ee9c2180e6da38d77c8d2aec39dd92b11ec883189a1a04e6b1031c</sum>
        </package>
        <package name="python3.12-test" version="3.12.5" release="2.el9_5.2" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-test-3.12.5-2.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">59e7fe1a10cd908bf93adfc9662dc15a4cc22607899fe280705883f0a3b2bd93</sum>
        </package>
        <package name="python3.12-idle" version="3.12.5" release="2.el9_5.2" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.2.src.rpm">
          <filename>python3.12-idle-3.12.5-2.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">d6ecb38e4db9198acb923030d4780c773c96085ec5fcc23ac29712c5daeb9132</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10983</id>
    <title>Moderate: python3.9:3.9.21 security update</title>
    <issued date="2024-12-12 00:00:00"/>
    <updated date="2024-12-16 14:37:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9:3.9.21 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10983" id="RHSA-2024:10983" type="rhsa" title="RHSA-2024:10983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11168" id="CVE-2024-11168" type="cve" title="CVE-2024-11168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325776" id="2325776" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10983.html" id="ALSA-2024:10983" type="self" title="ALSA-2024:10983"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="python3-debug" version="3.9.21" release="1.el9_5" epoch="0" arch="s390x" src="python3.9-3.9.21-1.el9_5.src.rpm">
          <filename>python3-debug-3.9.21-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">4cf8cc13e72fa634da1a2bcba2a4e028ba70f2ab200cf63f26b92eedc286e49b</sum>
        </package>
        <package name="python3-test" version="3.9.21" release="1.el9_5" epoch="0" arch="s390x" src="python3.9-3.9.21-1.el9_5.src.rpm">
          <filename>python3-test-3.9.21-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">753f5aae2c0739af4c9e365571203f5c082ec54442a1d4d522044b561be79ded</sum>
        </package>
        <package name="python3-idle" version="3.9.21" release="1.el9_5" epoch="0" arch="s390x" src="python3.9-3.9.21-1.el9_5.src.rpm">
          <filename>python3-idle-3.9.21-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">ddcae2fd820d90d94027cf9379397a000ee7ea315af4061b0cd8ad6c356759f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11111</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-12-16 00:00:00"/>
    <updated date="2024-12-23 08:16:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11111" id="RHSA-2024:11111" type="rhsa" title="RHSA-2024:11111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11111.html" id="ALSA-2024:11111" type="self" title="ALSA-2024:11111"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="python3.11-test" version="3.11.9" release="7.el9_5.2" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-test-3.11.9-7.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">24d02abb08a6cae7cde7275a0a5a7acbc34e6ccf9eb04888715274e64b935d43</sum>
        </package>
        <package name="python3.11-idle" version="3.11.9" release="7.el9_5.2" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-idle-3.11.9-7.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">ea5c2419781f702246d7c7cedab2cb8f319ff1447e00068ac8490c8379b719e0</sum>
        </package>
        <package name="python3.11-debug" version="3.11.9" release="7.el9_5.2" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.2.src.rpm">
          <filename>python3.11-debug-3.11.9-7.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">eaca982236ae7fd12b8c68943495dc474708cd437ba4eb72d7be1969ef7e168a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11219</id>
    <title>Moderate: edk2:20240524 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-23 08:27:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2:20240524 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.   

Security Fix(es):  

  * edk2: Integer overflows in PeCoffLoaderRelocateImage (CVE-2024-38796)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11219" id="RHSA-2024:11219" type="rhsa" title="RHSA-2024:11219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38796" id="CVE-2024-38796" type="cve" title="CVE-2024-38796"/>
      <reference href="https://bugzilla.redhat.com/2315390" id="2315390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11219.html" id="ALSA-2024:11219" type="self" title="ALSA-2024:11219"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="edk2-tools-doc" version="20240524" release="6.el9_5.3" epoch="0" arch="noarch" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-tools-doc-20240524-6.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">2b923e24eec0bc923208f279be2fa0de8f842b72a1682114e63d9f2e4b3d8654</sum>
        </package>
        <package name="edk2-ovmf" version="20240524" release="6.el9_5.3" epoch="0" arch="noarch" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-ovmf-20240524-6.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">78c94982627bd8d6000410fa5f470a76850f56d9d10d3b989fdf8cc767e6221e</sum>
        </package>
        <package name="edk2-aarch64" version="20240524" release="6.el9_5.3" epoch="0" arch="noarch" src="edk2-20240524-6.el9_5.3.src.rpm">
          <filename>edk2-aarch64-20240524-6.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">b4113deecdfdfe37d6e0009c5471b1d36782fb5ed693b1ca0c64dfd4f940de66</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11232</id>
    <title>Moderate: unbound:1.16.2 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-23 08:25:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>unbound:1.16.2 security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Unbounded name compression could lead to Denial of Service (CVE-2024-8508)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11232" id="RHSA-2024:11232" type="rhsa" title="RHSA-2024:11232"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8508" id="CVE-2024-8508" type="cve" title="CVE-2024-8508"/>
      <reference href="https://bugzilla.redhat.com/2316321" id="2316321" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11232.html" id="ALSA-2024:11232" type="self" title="ALSA-2024:11232"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="unbound-devel" version="1.16.2" release="8.el9_5.1" epoch="0" arch="s390x" src="unbound-1.16.2-8.el9_5.1.src.rpm">
          <filename>unbound-devel-1.16.2-8.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">e0264c64661cf51939ee52d7ebdee6c01d4cb58cd9850b72da1f47c3dff15fa9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11237</id>
    <title>Moderate: libsndfile:1.0.31 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-23 08:24:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsndfile:1.0.31 security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.   

Security Fix(es):  

  * libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote() (CVE-2024-50612)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11237" id="RHSA-2024:11237" type="rhsa" title="RHSA-2024:11237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50612" id="CVE-2024-50612" type="cve" title="CVE-2024-50612"/>
      <reference href="https://bugzilla.redhat.com/2322057" id="2322057" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11237.html" id="ALSA-2024:11237" type="self" title="ALSA-2024:11237"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="libsndfile-devel" version="1.0.31" release="8.el9_5.2" epoch="0" arch="s390x" src="libsndfile-1.0.31-8.el9_5.2.src.rpm">
          <filename>libsndfile-devel-1.0.31-8.el9_5.2.s390x.rpm</filename>
          <sum type="sha256">96e938e35849dbe0d09e57a6d2b7f83e97fb1f6511b2182c49f33e8379a1190b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11242</id>
    <title>Moderate: mpg123:1.32.9 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-23 08:21:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mpg123:1.32.9 security update</summary>
    <description>The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 (most commonly MPEG 1.0 layer 3 also known as MP3), as well as re-usable decoding and output libraries.  

Security Fix(es):  

  * mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11242" id="RHSA-2024:11242" type="rhsa" title="RHSA-2024:11242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10573" id="CVE-2024-10573" type="cve" title="CVE-2024-10573"/>
      <reference href="https://bugzilla.redhat.com/2322980" id="2322980" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11242.html" id="ALSA-2024:11242" type="self" title="ALSA-2024:11242"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="mpg123-devel" version="1.32.9" release="1.el9_5" epoch="0" arch="s390x" src="mpg123-1.32.9-1.el9_5.src.rpm">
          <filename>mpg123-devel-1.32.9-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">6af2f4becf6a9e89719cadd8c4d0c881e14bdfdc36837008d4f239aa6925781a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1141</id>
    <title>Moderate: mysql security update</title>
    <issued date="2024-03-05 00:00:00"/>
    <updated date="2024-03-07 19:03:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911)
* mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) (CVE-2023-21919, CVE-2023-21929, CVE-2023-21933)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21946, CVE-2023-21976, CVE-2023-21977, CVE-2023-21982)
* mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) (CVE-2023-21940, CVE-2023-21947, CVE-2023-21962)
* mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21953)
* mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21955)
* mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) (CVE-2023-21966)
* mysql: Server: DML unspecified vulnerability (CPU Apr 2023) (CVE-2023-21972)
* mysql: Client programs unspecified vulnerability (CPU Apr 2023) (CVE-2023-21980)
* mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) (CVE-2023-22005, CVE-2023-22007, CVE-2023-22057)
* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22008)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) (CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22092, CVE-2023-22103, CVE-2023-22110, CVE-2023-22112)
* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22033)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) (CVE-2023-22046)
* mysql: Client programs unspecified vulnerability (CPU Jul 2023) (CVE-2023-22053, CVE-2023-22054, CVE-2023-22056)
* mysql: Server: DDL unspecified vulnerability (CPU Jul 2023) (CVE-2023-22058)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22066, CVE-2023-22068, CVE-2023-22084, CVE-2023-22097, CVE-2023-22104, CVE-2023-22114)
* mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) (CVE-2023-22111)
* mysql: Server: DML unspecified vulnerability (CPU Oct 2023) (CVE-2023-22115)
* mysql: Server: RAPID unspecified vulnerability (CPU Jan 2024) (CVE-2024-20960)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) (CVE-2024-20961, CVE-2024-20962, CVE-2024-20965, CVE-2024-20966, CVE-2024-2097, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20982)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2024) (CVE-2024-20963)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2024) (CVE-2024-20964)
* mysql: Server: Replication unspecified vulnerability (CPU Jan 2024) (CVE-2024-20967)
* mysql: Server: Options unspecified vulnerability (CPU Jan 2024) (CVE-2024-20968)
* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20969)
* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20981)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2024) (CVE-2024-20983)
* mysql: Server : Security : Firewall unspecified vulnerability (CPU Jan 2024) (CVE-2024-20984)
* mysql: Server: UDF unspecified vulnerability (CPU Jan 2024) (CVE-2024-20985)
* zstd: mysql: buffer overrun in util.c (CVE-2022-4899)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2023) (CVE-2023-22038)
* mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2023) (CVE-2023-22048)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2023) (CVE-2023-22113)

Bug Fix(es):

* Fix for MySQL bug #33630199 in 8.0.32 introduces regression when --set-gtid-purged=OFF (AlmaLinux-22454)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1141" id="RHSA-2024:1141" type="rhsa" title="RHSA-2024:1141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4899" id="CVE-2022-4899" type="cve" title="CVE-2022-4899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21911" id="CVE-2023-21911" type="cve" title="CVE-2023-21911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21919" id="CVE-2023-21919" type="cve" title="CVE-2023-21919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21920" id="CVE-2023-21920" type="cve" title="CVE-2023-21920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21929" id="CVE-2023-21929" type="cve" title="CVE-2023-21929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21933" id="CVE-2023-21933" type="cve" title="CVE-2023-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21935" id="CVE-2023-21935" type="cve" title="CVE-2023-21935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21940" id="CVE-2023-21940" type="cve" title="CVE-2023-21940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21945" id="CVE-2023-21945" type="cve" title="CVE-2023-21945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21946" id="CVE-2023-21946" type="cve" title="CVE-2023-21946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21947" id="CVE-2023-21947" type="cve" title="CVE-2023-21947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21953" id="CVE-2023-21953" type="cve" title="CVE-2023-21953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21955" id="CVE-2023-21955" type="cve" title="CVE-2023-21955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21962" id="CVE-2023-21962" type="cve" title="CVE-2023-21962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21966" id="CVE-2023-21966" type="cve" title="CVE-2023-21966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21972" id="CVE-2023-21972" type="cve" title="CVE-2023-21972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21976" id="CVE-2023-21976" type="cve" title="CVE-2023-21976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21977" id="CVE-2023-21977" type="cve" title="CVE-2023-21977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21980" id="CVE-2023-21980" type="cve" title="CVE-2023-21980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21982" id="CVE-2023-21982" type="cve" title="CVE-2023-21982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22005" id="CVE-2023-22005" type="cve" title="CVE-2023-22005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22007" id="CVE-2023-22007" type="cve" title="CVE-2023-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22008" id="CVE-2023-22008" type="cve" title="CVE-2023-22008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22032" id="CVE-2023-22032" type="cve" title="CVE-2023-22032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22033" id="CVE-2023-22033" type="cve" title="CVE-2023-22033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22038" id="CVE-2023-22038" type="cve" title="CVE-2023-22038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22046" id="CVE-2023-22046" type="cve" title="CVE-2023-22046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22048" id="CVE-2023-22048" type="cve" title="CVE-2023-22048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22053" id="CVE-2023-22053" type="cve" title="CVE-2023-22053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22054" id="CVE-2023-22054" type="cve" title="CVE-2023-22054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22056" id="CVE-2023-22056" type="cve" title="CVE-2023-22056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22057" id="CVE-2023-22057" type="cve" title="CVE-2023-22057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22058" id="CVE-2023-22058" type="cve" title="CVE-2023-22058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22059" id="CVE-2023-22059" type="cve" title="CVE-2023-22059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22064" id="CVE-2023-22064" type="cve" title="CVE-2023-22064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22065" id="CVE-2023-22065" type="cve" title="CVE-2023-22065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22066" id="CVE-2023-22066" type="cve" title="CVE-2023-22066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22068" id="CVE-2023-22068" type="cve" title="CVE-2023-22068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22070" id="CVE-2023-22070" type="cve" title="CVE-2023-22070"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22078" id="CVE-2023-22078" type="cve" title="CVE-2023-22078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22079" id="CVE-2023-22079" type="cve" title="CVE-2023-22079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22084" id="CVE-2023-22084" type="cve" title="CVE-2023-22084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22092" id="CVE-2023-22092" type="cve" title="CVE-2023-22092"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22097" id="CVE-2023-22097" type="cve" title="CVE-2023-22097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22103" id="CVE-2023-22103" type="cve" title="CVE-2023-22103"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22104" id="CVE-2023-22104" type="cve" title="CVE-2023-22104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22110" id="CVE-2023-22110" type="cve" title="CVE-2023-22110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22111" id="CVE-2023-22111" type="cve" title="CVE-2023-22111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22112" id="CVE-2023-22112" type="cve" title="CVE-2023-22112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22113" id="CVE-2023-22113" type="cve" title="CVE-2023-22113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22114" id="CVE-2023-22114" type="cve" title="CVE-2023-22114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22115" id="CVE-2023-22115" type="cve" title="CVE-2023-22115"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20960" id="CVE-2024-20960" type="cve" title="CVE-2024-20960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20961" id="CVE-2024-20961" type="cve" title="CVE-2024-20961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20962" id="CVE-2024-20962" type="cve" title="CVE-2024-20962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20963" id="CVE-2024-20963" type="cve" title="CVE-2024-20963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20964" id="CVE-2024-20964" type="cve" title="CVE-2024-20964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20965" id="CVE-2024-20965" type="cve" title="CVE-2024-20965"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20966" id="CVE-2024-20966" type="cve" title="CVE-2024-20966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20967" id="CVE-2024-20967" type="cve" title="CVE-2024-20967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20968" id="CVE-2024-20968" type="cve" title="CVE-2024-20968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20969" id="CVE-2024-20969" type="cve" title="CVE-2024-20969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20970" id="CVE-2024-20970" type="cve" title="CVE-2024-20970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20971" id="CVE-2024-20971" type="cve" title="CVE-2024-20971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20972" id="CVE-2024-20972" type="cve" title="CVE-2024-20972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20973" id="CVE-2024-20973" type="cve" title="CVE-2024-20973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20974" id="CVE-2024-20974" type="cve" title="CVE-2024-20974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20976" id="CVE-2024-20976" type="cve" title="CVE-2024-20976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20977" id="CVE-2024-20977" type="cve" title="CVE-2024-20977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20978" id="CVE-2024-20978" type="cve" title="CVE-2024-20978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20981" id="CVE-2024-20981" type="cve" title="CVE-2024-20981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20982" id="CVE-2024-20982" type="cve" title="CVE-2024-20982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20983" id="CVE-2024-20983" type="cve" title="CVE-2024-20983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20984" id="CVE-2024-20984" type="cve" title="CVE-2024-20984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20985" id="CVE-2024-20985" type="cve" title="CVE-2024-20985"/>
      <reference href="https://bugzilla.redhat.com/2179864" id="2179864" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188109" id="2188109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188113" id="2188113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188115" id="2188115" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188116" id="2188116" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188117" id="2188117" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188118" id="2188118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188119" id="2188119" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188120" id="2188120" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188121" id="2188121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188122" id="2188122" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188123" id="2188123" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188124" id="2188124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188125" id="2188125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188127" id="2188127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188128" id="2188128" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188129" id="2188129" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188130" id="2188130" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188131" id="2188131" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188132" id="2188132" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224211" id="2224211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224212" id="2224212" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224213" id="2224213" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224214" id="2224214" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224215" id="2224215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224216" id="2224216" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224217" id="2224217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224218" id="2224218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224219" id="2224219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224220" id="2224220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224221" id="2224221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224222" id="2224222" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245014" id="2245014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245015" id="2245015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245016" id="2245016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245017" id="2245017" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245018" id="2245018" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245019" id="2245019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245020" id="2245020" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245021" id="2245021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245022" id="2245022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245023" id="2245023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245024" id="2245024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245026" id="2245026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245027" id="2245027" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245028" id="2245028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245029" id="2245029" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245030" id="2245030" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245031" id="2245031" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245032" id="2245032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245033" id="2245033" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245034" id="2245034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258771" id="2258771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258772" id="2258772" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258773" id="2258773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258774" id="2258774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258775" id="2258775" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258776" id="2258776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258777" id="2258777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258778" id="2258778" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258779" id="2258779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258780" id="2258780" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258781" id="2258781" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258782" id="2258782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258783" id="2258783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258784" id="2258784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258785" id="2258785" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258787" id="2258787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258788" id="2258788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258789" id="2258789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258790" id="2258790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258791" id="2258791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258792" id="2258792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258793" id="2258793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258794" id="2258794" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1141.html" id="ALSA-2024:1141" type="self" title="ALSA-2024:1141"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="mysql-test" version="8.0.36" release="1.el9_3" epoch="0" arch="s390x" src="mysql-8.0.36-1.el9_3.src.rpm">
          <filename>mysql-test-8.0.36-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">d71878bfb56621aec3d33d39d61422e44a1425d9cd67c991be96afe2fd1449fe</sum>
        </package>
        <package name="mysql-devel" version="8.0.36" release="1.el9_3" epoch="0" arch="s390x" src="mysql-8.0.36-1.el9_3.src.rpm">
          <filename>mysql-devel-8.0.36-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">de69222d31f8028a3b11be14bf9c4ae23c74097bbad394faa7716d2960ada8e3</sum>
        </package>
        <package name="mysql-libs" version="8.0.36" release="1.el9_3" epoch="0" arch="s390x" src="mysql-8.0.36-1.el9_3.src.rpm">
          <filename>mysql-libs-8.0.36-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">f5bd37517b6b9b9b46d84bb8c910769c8ed2c968b098b65a6d8eb08e3f3cce7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11486</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-12-19 00:00:00"/>
    <updated date="2025-01-13 20:04:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399)
  * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564)
  * kernel: bpf: Fix a kernel verifier crash in stacksafe() (CVE-2024-45020)
  * kernel: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (CVE-2024-46697)
  * kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CVE-2024-47675)
  * kernel: bpf: Fix a sdiv overflow issue (CVE-2024-49888)
  * kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099)
  * kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110)
  * kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125)
  * kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout (CVE-2024-50124)
  * kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (CVE-2024-50115)
  * kernel: xfrm: validate new SA&amp;#39;s prefixlen using SA family when sel.family is unset (CVE-2024-50142)
  * kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister (CVE-2024-50148)
  * kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192)
  * kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CVE-2024-50255)
  * kernel: sched/numa: Fix the potential null pointer dereference in task_numa_work() (CVE-2024-50223)
  * kernel: bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11486" id="RHSA-2024:11486" type="rhsa" title="RHSA-2024:11486"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27399" id="CVE-2024-27399" type="cve" title="CVE-2024-27399"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38564" id="CVE-2024-38564" type="cve" title="CVE-2024-38564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45020" id="CVE-2024-45020" type="cve" title="CVE-2024-45020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46697" id="CVE-2024-46697" type="cve" title="CVE-2024-46697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47675" id="CVE-2024-47675" type="cve" title="CVE-2024-47675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49888" id="CVE-2024-49888" type="cve" title="CVE-2024-49888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50099" id="CVE-2024-50099" type="cve" title="CVE-2024-50099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50110" id="CVE-2024-50110" type="cve" title="CVE-2024-50110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50115" id="CVE-2024-50115" type="cve" title="CVE-2024-50115"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50124" id="CVE-2024-50124" type="cve" title="CVE-2024-50124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50125" id="CVE-2024-50125" type="cve" title="CVE-2024-50125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50142" id="CVE-2024-50142" type="cve" title="CVE-2024-50142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50148" id="CVE-2024-50148" type="cve" title="CVE-2024-50148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50192" id="CVE-2024-50192" type="cve" title="CVE-2024-50192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50223" id="CVE-2024-50223" type="cve" title="CVE-2024-50223"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50255" id="CVE-2024-50255" type="cve" title="CVE-2024-50255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50262" id="CVE-2024-50262" type="cve" title="CVE-2024-50262"/>
      <reference href="https://bugzilla.redhat.com/2280462" id="2280462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293429" id="2293429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311717" id="2311717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312085" id="2312085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320254" id="2320254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320517" id="2320517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323904" id="2323904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323930" id="2323930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323937" id="2323937" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323944" id="2323944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323955" id="2323955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324315" id="2324315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324332" id="2324332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324612" id="2324612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324867" id="2324867" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324868" id="2324868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324892" id="2324892" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11486.html" id="ALSA-2024:11486" type="self" title="ALSA-2024:11486"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="libperf" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>libperf-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">419047a8331cad2d04d1d8baa2036a1bc3f0ef335e30acfbef2feb2d99bdb2e8</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-cross-headers-5.14.0-503.19.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">4c90c7738423bf0df1817f6449f08b362fcfab843df58c98ce5d18ddb11b749b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1239</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2024-03-07 00:00:00"/>
    <updated date="2024-03-11 11:17:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.

Security Fix(es):

* opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) (CVE-2024-0914)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1239" id="RHSA-2024:1239" type="rhsa" title="RHSA-2024:1239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0914" id="CVE-2024-0914" type="cve" title="CVE-2024-0914"/>
      <reference href="https://bugzilla.redhat.com/2260407" id="2260407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1239.html" id="ALSA-2024:1239" type="self" title="ALSA-2024:1239"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="opencryptoki-devel" version="3.21.0" release="9.el9_3.alma.1" epoch="0" arch="s390x" src="opencryptoki-3.21.0-9.el9_3.alma.1.src.rpm">
          <filename>opencryptoki-devel-3.21.0-9.el9_3.alma.1.s390x.rpm</filename>
          <sum type="sha256">e683e9a6eb8853165d5a44907a4336ad6974ebcb3d560f8fdb3cfeecbadeab82</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1309</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 10:35:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.117 and .NET Runtime 7.0.17.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1309" id="RHSA-2024:1309" type="rhsa" title="RHSA-2024:1309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1309.html" id="ALSA-2024:1309" type="self" title="ALSA-2024:1309"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.117" release="1.el9_3" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el9_3.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.117-1.el9_3.s390x.rpm</filename>
          <sum type="sha256">b17d066582cf988d779b0e47eb9f560fdf7e1489215006072a42859a82c421b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1310</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 12:45:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.103 and .NET Runtime 8.0.3.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1310" id="RHSA-2024:1310" type="rhsa" title="RHSA-2024:1310"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1310.html" id="ALSA-2024:1310" type="self" title="ALSA-2024:1310"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.103" release="2.el9_3" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-2.el9_3.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.103-2.el9_3.s390x.rpm</filename>
          <sum type="sha256">05cdabb373e056d9bc123b39ae29ca81fdfd6cc07fa0411b996e25a997e73bfb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1691</id>
    <title>Important: varnish security update</title>
    <issued date="2024-04-08 00:00:00"/>
    <updated date="2024-04-09 06:48:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1691" id="RHSA-2024:1691" type="rhsa" title="RHSA-2024:1691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30156" id="CVE-2024-30156" type="cve" title="CVE-2024-30156"/>
      <reference href="https://bugzilla.redhat.com/2271486" id="2271486" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1691.html" id="ALSA-2024:1691" type="self" title="ALSA-2024:1691"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="varnish-devel" version="6.6.2" release="4.el9_3.1" epoch="0" arch="s390x" src="varnish-6.6.2-4.el9_3.1.src.rpm">
          <filename>varnish-devel-6.6.2-4.el9_3.1.s390x.rpm</filename>
          <sum type="sha256">f29676d3fe31c14d0de08da208ec42733f68aea97e7085c4d6b5a98ce7bab368</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1750</id>
    <title>Important: unbound security update</title>
    <issued date="2024-04-10 00:00:00"/>
    <updated date="2024-04-12 11:51:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* A vulnerability was found in Unbound due to incorrect default permissions,
allowing any process outside the unbound group to modify the unbound runtime
configuration. The default combination of the "control-use-cert: no" option with
either explicit or implicit use of an IP address in the "control-interface"
option could allow improper access. If a process can connect over localhost to
port 8953, it can alter the configuration of unbound.service. This flaw allows
an unprivileged local process to manipulate a running instance, potentially
altering forwarders, allowing them to track all queries forwarded by the local
resolver, and, in some cases, disrupting resolving altogether.

To mitigate the vulnerability, a new file
"/etc/unbound/conf.d/remote-control.conf" has been added and included in the
main unbound configuration file, "unbound.conf". The file contains two
directives that should limit access to unbound.conf:

    control-interface: "/run/unbound/control"
    control-use-cert: "yes"

For details about these directives, run "man unbound.conf".

Updating to the version of unbound provided by this advisory should, in most
cases, address the vulnerability. To verify that your configuration is not
vulnerable, use the "unbound-control status | grep control" command. If the
output contains "control(ssl)" or "control(namedpipe)", your configuration is
not vulnerable. If the command output returns only "control", the configuration
is vulnerable because it does not enforce access only to the unbound group
members. To fix your configuration, add the line "include:
/etc/unbound/conf.d/remote-control.conf" to the end of the file
"/etc/unbound/unbound.conf". If you use a custom
"/etc/unbound/conf.d/remote-control.conf" file, add the new directives to this
file. (CVE-2024-1488)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1750" id="RHSA-2024:1750" type="rhsa" title="RHSA-2024:1750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1488" id="CVE-2024-1488" type="cve" title="CVE-2024-1488"/>
      <reference href="https://bugzilla.redhat.com/2264183" id="2264183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1750.html" id="ALSA-2024:1750" type="self" title="ALSA-2024:1750"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="unbound-devel" version="1.16.2" release="3.el9_3.5" epoch="0" arch="s390x" src="unbound-1.16.2-3.el9_3.5.src.rpm">
          <filename>unbound-devel-1.16.2-3.el9_3.5.s390x.rpm</filename>
          <sum type="sha256">ed68fd1fb61a83c616ab1f6f0cbe87f94e3c12ee5d391c6a98df6cc3089c2db1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1789</id>
    <title>Important: bind security update</title>
    <issued date="2024-04-11 00:00:00"/>
    <updated date="2024-04-12 12:58:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)
* bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
* bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)
* bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)
* bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1789" id="RHSA-2024:1789" type="rhsa" title="RHSA-2024:1789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5517" id="CVE-2023-5517" type="cve" title="CVE-2023-5517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5679" id="CVE-2023-5679" type="cve" title="CVE-2023-5679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6516" id="CVE-2023-6516" type="cve" title="CVE-2023-6516"/>
      <reference href="https://bugzilla.redhat.com/2263896" id="2263896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263897" id="2263897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263909" id="2263909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263911" id="2263911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1789.html" id="ALSA-2024:1789" type="self" title="ALSA-2024:1789"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="bind-doc" version="9.16.23" release="14.el9_3.4" epoch="32" arch="noarch" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>bind-doc-9.16.23-14.el9_3.4.noarch.rpm</filename>
          <sum type="sha256">22ea42050319c6952320fdfdb1eb6f005290375161f8b1ae7f8089901182832f</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="14.el9_3.4" epoch="32" arch="s390x" src="bind-9.16.23-14.el9_3.4.src.rpm">
          <filename>bind-devel-9.16.23-14.el9_3.4.s390x.rpm</filename>
          <sum type="sha256">e8f6380ead1bb50227b442f9ed716967b8c6317c1b41a490cc95da9116593919</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1822</id>
    <title>Moderate: java-11-openjdk security update</title>
    <issued date="2024-04-22 00:00:00"/>
    <updated date="2024-04-29 11:02:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1822" id="RHSA-2024:1822" type="rhsa" title="RHSA-2024:1822"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21085" id="CVE-2024-21085" type="cve" title="CVE-2024-21085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275001" id="2275001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1822.html" id="ALSA-2024:1822" type="self" title="ALSA-2024:1822"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">3508c06f5845c83bf5ec3c3cec5964620ac02c58f96f705ca9e98bdb8277b7df</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">70fbef84d71e8abe7db1ea266001cac03c419bce7fd225f97a0606729dff4efc</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">b8245eb9514a55e7f292f1dd0ac711b1e9541948d9b8ae40f4afe7a733a4bd25</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">c628f98b6b8890b902c1e37b7947cbd808cf0db7096b59385d4e947072a4b5bc</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">ca86101133c8da866997953ff719488f05923ecefb29a7f3abc0424c9328bcf1</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">da59bcc2e2747b4a961f428d94accf991b6c1b30b6286b8cb22bfdc86a3e2f22</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.23.0.9" release="3.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.23.0.9-3.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.23.0.9-3.el9.s390x.rpm</filename>
          <sum type="sha256">eaec58066327d43c21dca5193b983fddc9e6636afc98b77dd344003c62ed3fd0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1825</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-18 13:44:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1825" id="RHSA-2024:1825" type="rhsa" title="RHSA-2024:1825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1825.html" id="ALSA-2024:1825" type="self" title="ALSA-2024:1825"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">491a275263ff33bc2352acdf82f1c3fc51bff74d3e8ca3fa9d8b3581170bf6c0</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">4bfc9a0647acf749d86f04f42c8c9a6c3398c188b3c7b65a1bee5a1333b8e17a</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">584d2dd72533517c849e616a55dfe850c38cd7b8dbea430231dbe70d8ed1ed9d</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">65f4b2ef482be846350064142e8bca777811605ab42d72e5a52cf564a45eedd8</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">991a8d4e946c4f744f121e16fa4109a918e2017417c320432f9bb1ef966d3e27</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">b3f29ec931f1c80c0d670732bf052dc18582af7a31a5c80876e3396588a3ca7f</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.11.0.9" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.11.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">cbb2f031e3d21e6e7d6d8badb613f6f886803bc4bd7eb0fdcb983efd52063d98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1828</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-29 11:04:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1828" id="RHSA-2024:1828" type="rhsa" title="RHSA-2024:1828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-1828.html" id="ALSA-2024:1828" type="self" title="ALSA-2024:1828"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_3_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_3_default</name>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">02414f45ec84331238928d526037ff7ad821e2f0abbcd5d0ca3a0ef732c60f4b</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">250813a5320e3ee37d006d25b18ef955766e97ddc78cb901fab0e9ed0986f816</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">33f94762f8d76f412de471f62d735d691bd90a976428a1dfc582a286684074db</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">61fabcd0c9f1ad6cdc416333ea13d6d605b2ca53a6ce199ebf8a06e17734d675</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b5f2b8349cf733a38be4b7c6ab849804a909119896669ca0c473ec15e34a2f0c</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e93824b0bd44f9c4ff9c8ad417af78d2bb78d4082138c57e1edc430543d964cc</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f2fc217813ff509bebb438d9752b978a8eeef1ebe7169b7e4dac9057a3b4dc40</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2147</id>
    <title>Moderate: ipa security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:21:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* freeipa: specially crafted HTTP requests potentially lead to denial of service (CVE-2024-1481)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2147" id="RHSA-2024:2147" type="rhsa" title="RHSA-2024:2147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1481" id="CVE-2024-1481" type="cve" title="CVE-2024-1481"/>
      <reference href="https://bugzilla.redhat.com/2262169" id="2262169" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2147.html" id="ALSA-2024:2147" type="self" title="ALSA-2024:2147"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3-ipatests" version="4.11.0" release="9.el9_4" epoch="0" arch="noarch" src="ipa-4.11.0-9.el9_4.src.rpm">
          <filename>python3-ipatests-4.11.0-9.el9_4.noarch.rpm</filename>
          <sum type="sha256">d851142c22ff4c5d9ddf230430e8aced17c7f7736aaced76c0e7c45c4580cf6b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2169</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
* xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
* xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
* xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
* xorg-x11-server: SELinux context corruption (CVE-2024-0409)
* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)
* xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2169" id="RHSA-2024:2169" type="rhsa" title="RHSA-2024:2169"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5367" id="CVE-2023-5367" type="cve" title="CVE-2023-5367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5380" id="CVE-2023-5380" type="cve" title="CVE-2023-5380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6377" id="CVE-2023-6377" type="cve" title="CVE-2023-6377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6478" id="CVE-2023-6478" type="cve" title="CVE-2023-6478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6816" id="CVE-2023-6816" type="cve" title="CVE-2023-6816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0229" id="CVE-2024-0229" type="cve" title="CVE-2024-0229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0408" id="CVE-2024-0408" type="cve" title="CVE-2024-0408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0409" id="CVE-2024-0409" type="cve" title="CVE-2024-0409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21885" id="CVE-2024-21885" type="cve" title="CVE-2024-21885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21886" id="CVE-2024-21886" type="cve" title="CVE-2024-21886"/>
      <reference href="https://bugzilla.redhat.com/2243091" id="2243091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244736" id="2244736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253291" id="2253291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253298" id="2253298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256540" id="2256540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256542" id="2256542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256690" id="2256690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257689" id="2257689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257690" id="2257690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257691" id="2257691" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2169.html" id="ALSA-2024:2169" type="self" title="ALSA-2024:2169"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="24.el9" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-24.el9.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-24.el9.noarch.rpm</filename>
          <sum type="sha256">312de6141de8edf176752f753a27b2608f335b89d5c094f576bbb86755bd521f</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="24.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-24.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-24.el9.s390x.rpm</filename>
          <sum type="sha256">7ef72de6b434cddf1f436b96692b9c56c372c48e59b8acaaeff178922fc55345</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2184</id>
    <title>Moderate: libsndfile security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. 

Security Fix(es):

* libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2184" id="RHSA-2024:2184" type="rhsa" title="RHSA-2024:2184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33065" id="CVE-2022-33065" type="cve" title="CVE-2022-33065"/>
      <reference href="https://bugzilla.redhat.com/2238934" id="2238934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2184.html" id="ALSA-2024:2184" type="self" title="ALSA-2024:2184"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libsndfile-devel" version="1.0.31" release="8.el9" epoch="0" arch="s390x" src="libsndfile-1.0.31-8.el9.src.rpm">
          <filename>libsndfile-devel-1.0.31-8.el9.s390x.rpm</filename>
          <sum type="sha256">5988451f6673eb8024b012d1a511a402e79d061a6fe206f02b85bf3b0a187e17</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2199</id>
    <title>Important: pmix security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pmix security update</summary>
    <description>The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes.

Security Fix(es):

* pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2199" id="RHSA-2024:2199" type="rhsa" title="RHSA-2024:2199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41915" id="CVE-2023-41915" type="cve" title="CVE-2023-41915"/>
      <reference href="https://bugzilla.redhat.com/2238898" id="2238898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2199.html" id="ALSA-2024:2199" type="self" title="ALSA-2024:2199"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="pmix-pmi-devel" version="3.2.3" release="5.el9" epoch="0" arch="s390x" src="pmix-3.2.3-5.el9.src.rpm">
          <filename>pmix-pmi-devel-3.2.3-5.el9.s390x.rpm</filename>
          <sum type="sha256">0a8ed7f4f28fc0050682c6a49ba5594df9cb15acc8b05874eb87cdbc508de240</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2204</id>
    <title>Moderate: libnbd security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:55:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libnbd security update</summary>
    <description>Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.

Security Fix(es):

* libnbd: Malicious NBD server may crash libnbd (CVE-2023-5871)
* libnbd: Crash or misbehaviour when NBD server returns an unexpected block size (CVE-2023-5215)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2204" id="RHSA-2024:2204" type="rhsa" title="RHSA-2024:2204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5215" id="CVE-2023-5215" type="cve" title="CVE-2023-5215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5871" id="CVE-2023-5871" type="cve" title="CVE-2023-5871"/>
      <reference href="https://bugzilla.redhat.com/2241041" id="2241041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2247308" id="2247308" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2204.html" id="ALSA-2024:2204" type="self" title="ALSA-2024:2204"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="ocaml-libnbd" version="1.18.1" release="3.el9" epoch="0" arch="s390x" src="libnbd-1.18.1-3.el9.src.rpm">
          <filename>ocaml-libnbd-1.18.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">26690f05a3318f65a9297c32c9e01d80f5f9327e2233abb25011770c21a79f0d</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.18.1" release="3.el9" epoch="0" arch="s390x" src="libnbd-1.18.1-3.el9.src.rpm">
          <filename>ocaml-libnbd-devel-1.18.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">46635e35ef5d06324225c5419502e80d7e68ea2c3e872b21bd0be8c63546a048</sum>
        </package>
        <package name="libnbd-devel" version="1.18.1" release="3.el9" epoch="0" arch="s390x" src="libnbd-1.18.1-3.el9.src.rpm">
          <filename>libnbd-devel-1.18.1-3.el9.s390x.rpm</filename>
          <sum type="sha256">84032db32c0a51fd2c0bbba8e40d206d2642f8d55afc099bd09813075111b536</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2208</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: Incorrect offset calculation leading to DOS (CVE-2023-39350)
* freerdp: Null Pointer Dereference leading DOS in RemoteFX (CVE-2023-39351)
* freerdp: invalid offset validation leading to Out Of Bound Write (CVE-2023-39352)
* freerdp: missing offset validation leading to Out-of-Bounds Read in gdi_multi_opaque_rect (CVE-2023-39356)
* freerdp: Integer overflow leading to out-of-bound write vulnerability in gdi_CreateSurface (CVE-2023-40186)
* freerdp: Out-of-bounds write in clear_decompress_bands_data (CVE-2023-40567)
* freerdp: Out-of-bounds write in the `progressive_decompress` function due to incorrect calculations (CVE-2023-40569)
* freerdp: buffer overflow in ncrush_decompress causes crash with crafted input (CVE-2023-40589)
* freerdp: missing offset validation leading to Out Of Bound Read (CVE-2023-39353)
* freerdp: Out-Of-Bounds Read in nsc_rle_decompress_data (CVE-2023-39354)
* freerdp: integer-Underflow leading to Out-Of-Bound Read in zgfx_decompress_segment (CVE-2023-40181)
* freerdp: Out-of-bounds read in general_LumaToYUV444 (CVE-2023-40188)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2208" id="RHSA-2024:2208" type="rhsa" title="RHSA-2024:2208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39350" id="CVE-2023-39350" type="cve" title="CVE-2023-39350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39351" id="CVE-2023-39351" type="cve" title="CVE-2023-39351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39352" id="CVE-2023-39352" type="cve" title="CVE-2023-39352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39353" id="CVE-2023-39353" type="cve" title="CVE-2023-39353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39354" id="CVE-2023-39354" type="cve" title="CVE-2023-39354"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39356" id="CVE-2023-39356" type="cve" title="CVE-2023-39356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40181" id="CVE-2023-40181" type="cve" title="CVE-2023-40181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40186" id="CVE-2023-40186" type="cve" title="CVE-2023-40186"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40188" id="CVE-2023-40188" type="cve" title="CVE-2023-40188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40567" id="CVE-2023-40567" type="cve" title="CVE-2023-40567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40569" id="CVE-2023-40569" type="cve" title="CVE-2023-40569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40589" id="CVE-2023-40589" type="cve" title="CVE-2023-40589"/>
      <reference href="https://bugzilla.redhat.com/2236606" id="2236606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236650" id="2236650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236656" id="2236656" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236669" id="2236669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236730" id="2236730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236750" id="2236750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236759" id="2236759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236763" id="2236763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236766" id="2236766" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236774" id="2236774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236779" id="2236779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236784" id="2236784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2208.html" id="ALSA-2024:2208" type="self" title="ALSA-2024:2208"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libwinpr-devel" version="2.11.2" release="1.el9" epoch="2" arch="s390x" src="freerdp-2.11.2-1.el9.src.rpm">
          <filename>libwinpr-devel-2.11.2-1.el9.s390x.rpm</filename>
          <sum type="sha256">0e932d10ad80a54dd06a9dc8c53c62f98057f5f0e56bbb8e8df0544ecc36b12b</sum>
        </package>
        <package name="freerdp-devel" version="2.11.2" release="1.el9" epoch="2" arch="s390x" src="freerdp-2.11.2-1.el9.src.rpm">
          <filename>freerdp-devel-2.11.2-1.el9.s390x.rpm</filename>
          <sum type="sha256">57fe36d950db5dd66f9e554a0c737c746cde634400dcf0b8e918c28837311add</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2236</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:10:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

* libvirt: NULL pointer dereference in udevConnectListAllInterfaces() (CVE-2024-2496)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2236" id="RHSA-2024:2236" type="rhsa" title="RHSA-2024:2236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2496" id="CVE-2024-2496" type="cve" title="CVE-2024-2496"/>
      <reference href="https://bugzilla.redhat.com/2269672" id="2269672" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2236.html" id="ALSA-2024:2236" type="self" title="ALSA-2024:2236"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libvirt-daemon-plugin-sanlock" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">4f1ce1ce362c0a2ccbec254f97eef3a539b7f4d259e7f6f81f30e9a58f194069</sum>
        </package>
        <package name="libvirt-docs" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-docs-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">76160c50fecde8ae6d2e7796c06835aa478b0392a6a0f4b2a8c50bb5ddb5fb40</sum>
        </package>
        <package name="libvirt-devel" version="10.0.0" release="6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.el9_4.alma.1.src.rpm">
          <filename>libvirt-devel-10.0.0-6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">90518d4cd8a7c11b7c71d71626309b71c0b5dc6df37b37fbc396e086e015687e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2276</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qt: incorrect integer overflow check (CVE-2023-51714)
* qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2276" id="RHSA-2024:2276" type="rhsa" title="RHSA-2024:2276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51714" id="CVE-2023-51714" type="cve" title="CVE-2023-51714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25580" id="CVE-2024-25580" type="cve" title="CVE-2024-25580"/>
      <reference href="https://bugzilla.redhat.com/2255856" id="2255856" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264423" id="2264423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2276.html" id="ALSA-2024:2276" type="self" title="ALSA-2024:2276"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="qt5-qtbase-static" version="5.15.9" release="9.el9" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-9.el9.src.rpm">
          <filename>qt5-qtbase-static-5.15.9-9.el9.s390x.rpm</filename>
          <sum type="sha256">180e2c5cdeaff5fb06eae99d0fc989e255c5d92e09f5c8aaf16ed641c8551187</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2287</id>
    <title>Moderate: gstreamer1-plugins-bad-free security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
* gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)
* gstreamer-plugins-bad-free: buffer overflow vulnerability (CVE-2023-50186)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2287" id="RHSA-2024:2287" type="rhsa" title="RHSA-2024:2287"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40474" id="CVE-2023-40474" type="cve" title="CVE-2023-40474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40475" id="CVE-2023-40475" type="cve" title="CVE-2023-40475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40476" id="CVE-2023-40476" type="cve" title="CVE-2023-40476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50186" id="CVE-2023-50186" type="cve" title="CVE-2023-50186"/>
      <reference href="https://bugzilla.redhat.com/2254587" id="2254587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254588" id="2254588" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254589" id="2254589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255639" id="2255639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2287.html" id="ALSA-2024:2287" type="self" title="ALSA-2024:2287"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.22.1" release="4.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.1-4.el9.s390x.rpm</filename>
          <sum type="sha256">0deb5d700b3248b6d5882b346a6f1154483db4a9d19406847c102a4bc76d921b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2289</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: infinite loop via a crafted TIFF file (CVE-2022-40090)
* libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c (CVE-2023-3618)
* libtiff: integer overflow in tiffcp.c (CVE-2023-40745)
* libtiff: potential integer overflow in raw2tiff.c (CVE-2023-41175)
* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2289" id="RHSA-2024:2289" type="rhsa" title="RHSA-2024:2289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40090" id="CVE-2022-40090" type="cve" title="CVE-2022-40090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3618" id="CVE-2023-3618" type="cve" title="CVE-2023-3618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40745" id="CVE-2023-40745" type="cve" title="CVE-2023-40745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41175" id="CVE-2023-41175" type="cve" title="CVE-2023-41175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6228" id="CVE-2023-6228" type="cve" title="CVE-2023-6228"/>
      <reference href="https://bugzilla.redhat.com/2215865" id="2215865" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2234970" id="2234970" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235264" id="2235264" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235265" id="2235265" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240995" id="2240995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2289.html" id="ALSA-2024:2289" type="self" title="ALSA-2024:2289"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libtiff-tools" version="4.4.0" release="12.el9" epoch="0" arch="s390x" src="libtiff-4.4.0-12.el9.src.rpm">
          <filename>libtiff-tools-4.4.0-12.el9.s390x.rpm</filename>
          <sum type="sha256">3460f4be1c2bf1096dd75ab21d7ef2d158e9198481a15ea7eca2d5f3aa3adb7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2292</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:55:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2292" id="RHSA-2024:2292" type="rhsa" title="RHSA-2024:2292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2292.html" id="ALSA-2024:2292" type="self" title="ALSA-2024:2292"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.11-test" version="3.11.7" release="1.el9" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9.src.rpm">
          <filename>python3.11-test-3.11.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">2b70a86739aff3ca3f85e41d25171eb4b47ff8a97fa086d369d2f71cc8e61bca</sum>
        </package>
        <package name="python3.11-idle" version="3.11.7" release="1.el9" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">68b9b801259c4ed0ef0c31daa8a3c358105500c01743e0cda4e6dba07136a827</sum>
        </package>
        <package name="python3.11-debug" version="3.11.7" release="1.el9" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">79d5dcf31ca117e4d0850c8f1b2481b4d0918a5d5e41e186cc89dfe5aa68f401</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2295</id>
    <title>Moderate: libjpeg-turbo security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libjpeg-turbo security update</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c (CVE-2021-29390)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2295" id="RHSA-2024:2295" type="rhsa" title="RHSA-2024:2295"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-29390" id="CVE-2021-29390" type="cve" title="CVE-2021-29390"/>
      <reference href="https://bugzilla.redhat.com/2235521" id="2235521" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2295.html" id="ALSA-2024:2295" type="self" title="ALSA-2024:2295"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="turbojpeg-devel" version="2.0.90" release="7.el9" epoch="0" arch="s390x" src="libjpeg-turbo-2.0.90-7.el9.src.rpm">
          <filename>turbojpeg-devel-2.0.90-7.el9.s390x.rpm</filename>
          <sum type="sha256">3a5d0be1ebf54739f3c7ea921cedda99a3763762cb3138c28704d0fca37fe80e</sum>
        </package>
        <package name="turbojpeg" version="2.0.90" release="7.el9" epoch="0" arch="s390x" src="libjpeg-turbo-2.0.90-7.el9.src.rpm">
          <filename>turbojpeg-2.0.90-7.el9.s390x.rpm</filename>
          <sum type="sha256">3b7f277ce028f54c5f1c48e5eda7b5ae96b860a6f139eab905d4aafc88da164c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2353</id>
    <title>Moderate: mingw components security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:55:52"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mingw components security update</summary>
    <description>MinGW (Minimalist GNU for Windows) is a free and open source software development environment to create Microsoft Windows applications.

Security Fix(es):

* binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64 (CVE-2023-1579)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2353" id="RHSA-2024:2353" type="rhsa" title="RHSA-2024:2353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1579" id="CVE-2023-1579" type="cve" title="CVE-2023-1579"/>
      <reference href="https://bugzilla.redhat.com/2180905" id="2180905" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2353.html" id="ALSA-2024:2353" type="self" title="ALSA-2024:2353"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="mingw32-binutils" version="2.41" release="3.el9" epoch="0" arch="s390x" src="mingw-binutils-2.41-3.el9.src.rpm">
          <filename>mingw32-binutils-2.41-3.el9.s390x.rpm</filename>
          <sum type="sha256">0edbb04623435a7fd8c1fd90e79d3aaca29949bc0cfc3712ffb133de77c88548</sum>
        </package>
        <package name="mingw-binutils-generic" version="2.41" release="3.el9" epoch="0" arch="s390x" src="mingw-binutils-2.41-3.el9.src.rpm">
          <filename>mingw-binutils-generic-2.41-3.el9.s390x.rpm</filename>
          <sum type="sha256">c0a6afc90882f594bf4da7d1b74958766dc1a40ca3b037408bca6e47966342e5</sum>
        </package>
        <package name="mingw64-binutils" version="2.41" release="3.el9" epoch="0" arch="s390x" src="mingw-binutils-2.41-3.el9.src.rpm">
          <filename>mingw64-binutils-2.41-3.el9.s390x.rpm</filename>
          <sum type="sha256">e2cdde4deda19b7a47942d7542217bb8cb1c7c4dc91c897c17beb7b27858c056</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2377</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zziplib security update</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2377" id="RHSA-2024:2377" type="rhsa" title="RHSA-2024:2377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18770" id="CVE-2020-18770" type="cve" title="CVE-2020-18770"/>
      <reference href="https://bugzilla.redhat.com/2246907" id="2246907" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2377.html" id="ALSA-2024:2377" type="self" title="ALSA-2024:2377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="zziplib-devel" version="0.13.71" release="11.el9_4" epoch="0" arch="s390x" src="zziplib-0.13.71-11.el9_4.src.rpm">
          <filename>zziplib-devel-0.13.71-11.el9_4.s390x.rpm</filename>
          <sum type="sha256">04251345a83fb720606d5eceec63ff84b1fe5ef2134214e42411f4f417ef018d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2394</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-11-03 22:05:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546)
  * kernel: multiple use-after-free vulnerabilities (CVE-2024-1086, CVE-2023-3567, CVE-2023-4133, CVE-2023-6932, CVE-2023-39198, CVE-2023-51043, CVE-2023-51779, CVE-2023-51780, CVE-2024-1085, CVE-2024-26582)
  * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
  * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)
  * kernel: multiple NULL pointer dereference vulnerabilities (CVE-2022-38096, CVE-2023-6622, CVE-2023-6915, CVE-2023-42754, CVE-2023-46862, CVE-2023-52574, CVE-2024-0841, CVE-2023-52448)
  * kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c (CVE-2022-45934)
  * kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() (CVE-2023-6040)
  * kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF (CVE-2023-6531)
  * kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (CVE-2023-6931)
  * kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023)
  * kernel: irdma: Improper access control (CVE-2023-25775)
  * Kernel: double free in hci_conn_cleanup of the bluetooth subsystem (CVE-2023-28464)
  * kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (CVE-2023-28866)
  * kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl (CVE-2023-31083)
  * kernel: multiple out-of-bounds read vulnerabilities (CVE-2023-37453, CVE-2023-39189, CVE-2023-39193, CVE-2023-6121, CVE-2023-39194)
  * kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP (CVE-2023-42756)
  * kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write (CVE-2023-45863)
  * kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434)
  * kernel: mm/sparsemem: fix race in accessing memory_section-&gt;usage (CVE-2023-52489)
  * kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522)
  * kernel: multiple memory leak vulnerabilities (CVE-2023-52529, CVE-2023-52581)
  * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
  * kernel: net/core: kernel crash in ETH_P_1588 flow dissector (CVE-2023-52580)
  * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
  * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (CVE-2024-0565)
  * kernel: tls: race between async notify and socket close (CVE-2024-26583)
  * kernel: tls: handle backlogging of crypto requests (CVE-2024-26584)
  * kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585)
  * kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586)
  * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
  * kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602)
  * kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-26609)
  * kernel: local dos vulnerability in scatterwalk_copychunks (CVE-2023-6176)
  * kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476)
  * kernel: netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620)
  * kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVE-2024-26633)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2394" id="RHSA-2024:2394" type="rhsa" title="RHSA-2024:2394"/>
      <reference href="https://bugzilla.redhat.com/1918601" id="1918601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2049700" id="2049700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133452" id="2133452" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151959" id="2151959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177759" id="2177759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185519" id="2185519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188102" id="2188102" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210024" id="2210024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213132" id="2213132" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218332" id="2218332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219359" id="2219359" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221039" id="2221039" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221463" id="2221463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221702" id="2221702" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226777" id="2226777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226787" id="2226787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226788" id="2226788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231410" id="2231410" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2239845" id="2239845" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2239848" id="2239848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244720" id="2244720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2246980" id="2246980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250043" id="2250043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2252731" id="2252731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253034" id="2253034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253632" id="2253632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254961" id="2254961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254982" id="2254982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255283" id="2255283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255498" id="2255498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256490" id="2256490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256822" id="2256822" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257682" id="2257682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258013" id="2258013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258518" id="2258518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2260005" id="2260005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2262126" id="2262126" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2262127" id="2262127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265285" id="2265285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265517" id="2265517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265518" id="2265518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265519" id="2265519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265520" id="2265520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265645" id="2265645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265646" id="2265646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265653" id="2265653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267041" id="2267041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267695" id="2267695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267750" id="2267750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267758" id="2267758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267760" id="2267760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267761" id="2267761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267788" id="2267788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267795" id="2267795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269189" id="2269189" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269217" id="2269217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270080" id="2270080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270118" id="2270118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270883" id="2270883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2394.html" id="ALSA-2024:2394" type="self" title="ALSA-2024:2394"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2020-26555.html" id="CVE-2020-26555" type="cve" title="CVE-2020-26555"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-0480.html" id="CVE-2022-0480" type="cve" title="CVE-2022-0480"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-38096.html" id="CVE-2022-38096" type="cve" title="CVE-2022-38096"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-45934.html" id="CVE-2022-45934" type="cve" title="CVE-2022-45934"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-24023.html" id="CVE-2023-24023" type="cve" title="CVE-2023-24023"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-25775.html" id="CVE-2023-25775" type="cve" title="CVE-2023-25775"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-28464.html" id="CVE-2023-28464" type="cve" title="CVE-2023-28464"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-28866.html" id="CVE-2023-28866" type="cve" title="CVE-2023-28866"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-31083.html" id="CVE-2023-31083" type="cve" title="CVE-2023-31083"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-3567.html" id="CVE-2023-3567" type="cve" title="CVE-2023-3567"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-37453.html" id="CVE-2023-37453" type="cve" title="CVE-2023-37453"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39189.html" id="CVE-2023-39189" type="cve" title="CVE-2023-39189"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39193.html" id="CVE-2023-39193" type="cve" title="CVE-2023-39193"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39194.html" id="CVE-2023-39194" type="cve" title="CVE-2023-39194"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39198.html" id="CVE-2023-39198" type="cve" title="CVE-2023-39198"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-4133.html" id="CVE-2023-4133" type="cve" title="CVE-2023-4133"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-42754.html" id="CVE-2023-42754" type="cve" title="CVE-2023-42754"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-42756.html" id="CVE-2023-42756" type="cve" title="CVE-2023-42756"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-45863.html" id="CVE-2023-45863" type="cve" title="CVE-2023-45863"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-46862.html" id="CVE-2023-46862" type="cve" title="CVE-2023-46862"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51043.html" id="CVE-2023-51043" type="cve" title="CVE-2023-51043"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51779.html" id="CVE-2023-51779" type="cve" title="CVE-2023-51779"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51780.html" id="CVE-2023-51780" type="cve" title="CVE-2023-51780"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52434.html" id="CVE-2023-52434" type="cve" title="CVE-2023-52434"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52448.html" id="CVE-2023-52448" type="cve" title="CVE-2023-52448"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52450.html" id="CVE-2023-52450" type="cve" title="CVE-2023-52450"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52476.html" id="CVE-2023-52476" type="cve" title="CVE-2023-52476"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52489.html" id="CVE-2023-52489" type="cve" title="CVE-2023-52489"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52522.html" id="CVE-2023-52522" type="cve" title="CVE-2023-52522"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52529.html" id="CVE-2023-52529" type="cve" title="CVE-2023-52529"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52574.html" id="CVE-2023-52574" type="cve" title="CVE-2023-52574"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52578.html" id="CVE-2023-52578" type="cve" title="CVE-2023-52578"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52580.html" id="CVE-2023-52580" type="cve" title="CVE-2023-52580"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52581.html" id="CVE-2023-52581" type="cve" title="CVE-2023-52581"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52597.html" id="CVE-2023-52597" type="cve" title="CVE-2023-52597"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52610.html" id="CVE-2023-52610" type="cve" title="CVE-2023-52610"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52620.html" id="CVE-2023-52620" type="cve" title="CVE-2023-52620"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6040.html" id="CVE-2023-6040" type="cve" title="CVE-2023-6040"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6121.html" id="CVE-2023-6121" type="cve" title="CVE-2023-6121"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6176.html" id="CVE-2023-6176" type="cve" title="CVE-2023-6176"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6531.html" id="CVE-2023-6531" type="cve" title="CVE-2023-6531"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6546.html" id="CVE-2023-6546" type="cve" title="CVE-2023-6546"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6622.html" id="CVE-2023-6622" type="cve" title="CVE-2023-6622"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6915.html" id="CVE-2023-6915" type="cve" title="CVE-2023-6915"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6931.html" id="CVE-2023-6931" type="cve" title="CVE-2023-6931"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6932.html" id="CVE-2023-6932" type="cve" title="CVE-2023-6932"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-0565.html" id="CVE-2024-0565" type="cve" title="CVE-2024-0565"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-0841.html" id="CVE-2024-0841" type="cve" title="CVE-2024-0841"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-1085.html" id="CVE-2024-1085" type="cve" title="CVE-2024-1085"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-1086.html" id="CVE-2024-1086" type="cve" title="CVE-2024-1086"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25744.html" id="CVE-2024-25744" type="cve" title="CVE-2024-25744"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26582.html" id="CVE-2024-26582" type="cve" title="CVE-2024-26582"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26583.html" id="CVE-2024-26583" type="cve" title="CVE-2024-26583"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26584.html" id="CVE-2024-26584" type="cve" title="CVE-2024-26584"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26585.html" id="CVE-2024-26585" type="cve" title="CVE-2024-26585"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26586.html" id="CVE-2024-26586" type="cve" title="CVE-2024-26586"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26593.html" id="CVE-2024-26593" type="cve" title="CVE-2024-26593"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26602.html" id="CVE-2024-26602" type="cve" title="CVE-2024-26602"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26609.html" id="CVE-2024-26609" type="cve" title="CVE-2024-26609"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26633.html" id="CVE-2024-26633" type="cve" title="CVE-2024-26633"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26671.html" id="CVE-2024-26671" type="cve" title="CVE-2024-26671"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libperf" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">21b0ef353557882c3a2976c88e1925401fb5618e730ce782dde7626ba025919e</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.13.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">a174e6680c7cdcceaf4bedd1d5d9636c93a33b616f2b4aa15255fbe1ced56201</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2433</id>
    <title>Moderate: avahi security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:00:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469)
* avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470)
* avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471)
* avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472)
* avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2433" id="RHSA-2024:2433" type="rhsa" title="RHSA-2024:2433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38469" id="CVE-2023-38469" type="cve" title="CVE-2023-38469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38470" id="CVE-2023-38470" type="cve" title="CVE-2023-38470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38471" id="CVE-2023-38471" type="cve" title="CVE-2023-38471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38472" id="CVE-2023-38472" type="cve" title="CVE-2023-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38473" id="CVE-2023-38473" type="cve" title="CVE-2023-38473"/>
      <reference href="https://bugzilla.redhat.com/2191687" id="2191687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191690" id="2191690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191691" id="2191691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191692" id="2191692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191694" id="2191694" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2433.html" id="ALSA-2024:2433" type="self" title="ALSA-2024:2433"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="avahi-compat-libdns_sd" version="0.8" release="20.el9" epoch="0" arch="s390x" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-0.8-20.el9.s390x.rpm</filename>
          <sum type="sha256">36519353a282ca163fb8dbc617c43ac9ed99fc1f44060a03e17d97903cb59391</sum>
        </package>
        <package name="avahi-compat-howl" version="0.8" release="20.el9" epoch="0" arch="s390x" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-compat-howl-0.8-20.el9.s390x.rpm</filename>
          <sum type="sha256">37ba3700c1dd120dfafaf57bd170fb992f573d54d9c280b4ca57f308d0323e28</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" version="0.8" release="20.el9" epoch="0" arch="s390x" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.8-20.el9.s390x.rpm</filename>
          <sum type="sha256">a9d262530fd2a07226139885fa916295979dced285158b0aff28d0d8e136c8e0</sum>
        </package>
        <package name="avahi-glib-devel" version="0.8" release="20.el9" epoch="0" arch="s390x" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-glib-devel-0.8-20.el9.s390x.rpm</filename>
          <sum type="sha256">c669583132c3aaa2cd0251f1c3e8a11a8b6a17f87929bde9447b032fd6abf035</sum>
        </package>
        <package name="avahi-compat-howl-devel" version="0.8" release="20.el9" epoch="0" arch="s390x" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-compat-howl-devel-0.8-20.el9.s390x.rpm</filename>
          <sum type="sha256">d5372d50a9f7490fba2ff8f1c96f389ce38df0fb323c6c27a45078b4f2452f73</sum>
        </package>
        <package name="avahi-devel" version="0.8" release="20.el9" epoch="0" arch="s390x" src="avahi-0.8-20.el9.src.rpm">
          <filename>avahi-devel-0.8-20.el9.s390x.rpm</filename>
          <sum type="sha256">fc5518e3f11a0504fe8c44bc71eef01027a91001ee431b7c365122afa3054492</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2512</id>
    <title>Low: file security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>file security update</summary>
    <description>The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats.

Security Fix(es):

* file: stack-based buffer over-read in file_copystr in funcs.c (CVE-2022-48554)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2512" id="RHSA-2024:2512" type="rhsa" title="RHSA-2024:2512"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48554" id="CVE-2022-48554" type="cve" title="CVE-2022-48554"/>
      <reference href="https://bugzilla.redhat.com/2235714" id="2235714" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2512.html" id="ALSA-2024:2512" type="self" title="ALSA-2024:2512"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="file-devel" version="5.39" release="16.el9" epoch="0" arch="s390x" src="file-5.39-16.el9.src.rpm">
          <filename>file-devel-5.39-16.el9.s390x.rpm</filename>
          <sum type="sha256">8946435b2395b86393c330d3c109d164a14579cae8e0bb95b7cbfecf47cd015b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2551</id>
    <title>Important: bind security update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 15:04:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)
* bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
* bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)
* bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)
* bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)

Bug Fix(es):

* bind-dyndb-ldap: rebuilt to adapt ABI changes in bind

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2551" id="RHSA-2024:2551" type="rhsa" title="RHSA-2024:2551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5517" id="CVE-2023-5517" type="cve" title="CVE-2023-5517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5679" id="CVE-2023-5679" type="cve" title="CVE-2023-5679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6516" id="CVE-2023-6516" type="cve" title="CVE-2023-6516"/>
      <reference href="https://bugzilla.redhat.com/2263896" id="2263896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263897" id="2263897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263909" id="2263909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263911" id="2263911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2551.html" id="ALSA-2024:2551" type="self" title="ALSA-2024:2551"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="bind-devel" version="9.16.23" release="18.el9_4.1" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-devel-9.16.23-18.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">71e539a68214a74173f6fe92fa60be3ec7c28400842101607565c6cd9019d742</sum>
        </package>
        <package name="bind-doc" version="9.16.23" release="18.el9_4.1" epoch="32" arch="noarch" src="bind-9.16.23-18.el9_4.1.src.rpm">
          <filename>bind-doc-9.16.23-18.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">f79829629665932a43bcf0575918edac6feb3858caced0cd6b7d9228d46c6ec4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2560</id>
    <title>Moderate: libvirt security and bug fix update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:56:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security and bug fix update</summary>
    <description>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441)
* libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() [almalinux-9] (JIRA:AlmaLinux-25081)
* libvirt: negative g_new0 length can lead to unbounded memory allocation [almalinux-9] (JIRA:AlmaLinux-29515)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2560" id="RHSA-2024:2560" type="rhsa" title="RHSA-2024:2560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1441" id="CVE-2024-1441" type="cve" title="CVE-2024-1441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2494" id="CVE-2024-2494" type="cve" title="CVE-2024-2494"/>
      <reference href="https://bugzilla.redhat.com/2263841" id="2263841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270115" id="2270115" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2560.html" id="ALSA-2024:2560" type="self" title="ALSA-2024:2560"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libvirt-devel" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-devel-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">1ce6d9af7a26503ce907836cef03d031d989d5f5afd72d516925f8fb57288394</sum>
        </package>
        <package name="libvirt-docs" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-docs-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">285b83061cbfae3adc11aca8406a99886da257ddabb100247a57045694414078</sum>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" version="10.0.0" release="6.2.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.2.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-10.0.0-6.2.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">b1d2ea14179e9838d8734f6453c73cfdb4b82a2c90a7e6b711739f8fa802ddad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2571</id>
    <title>Moderate: sssd security and bug fix update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-05-07 14:54:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sssd security and bug fix update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

Bug Fix(es):

* socket leak (JIRA:AlmaLinux-22340)
* Passkey cannot fall back to password (JIRA:AlmaLinux-28161)
* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (JIRA:AlmaLinux-27209)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2571" id="RHSA-2024:2571" type="rhsa" title="RHSA-2024:2571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3758" id="CVE-2023-3758" type="cve" title="CVE-2023-3758"/>
      <reference href="https://bugzilla.redhat.com/2223762" id="2223762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2571.html" id="ALSA-2024:2571" type="self" title="ALSA-2024:2571"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libsss_nss_idmap-devel" version="2.9.4" release="6.el9_4" epoch="0" arch="s390x" src="sssd-2.9.4-6.el9_4.src.rpm">
          <filename>libsss_nss_idmap-devel-2.9.4-6.el9_4.s390x.rpm</filename>
          <sum type="sha256">ce832588925084f7b2d342ff8893ce6138c921170fda0d1114bda83c0c133a25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2758</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-05-08 00:00:00"/>
    <updated date="2024-11-03 22:08:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
  * CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743)


Bug Fix(es):  

  * ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:AlmaLinux-27009)
  * mm/mglru: fix underprotected page cache (JIRA:AlmaLinux-29235)
  * [EMR] [TBOOT OS] SUT could not go to S3 state with AlmaLinux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:AlmaLinux-29673)
  * system hangs completely - NMI not possible (JIRA:AlmaLinux-30678)
  * ice 0000:6f:00.0: PTP failed to get time (JIRA:AlmaLinux-30110)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2758" id="RHSA-2024:2758" type="rhsa" title="RHSA-2024:2758"/>
      <reference href="https://bugzilla.redhat.com/2250843" id="2250843" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270836" id="2270836" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2758.html" id="ALSA-2024:2758" type="self" title="ALSA-2024:2758"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-5090.html" id="CVE-2023-5090" type="cve" title="CVE-2023-5090"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6240.html" id="CVE-2023-6240" type="cve" title="CVE-2023-6240"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25742.html" id="CVE-2024-25742" type="cve" title="CVE-2024-25742"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25743.html" id="CVE-2024-25743" type="cve" title="CVE-2024-25743"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libperf" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">0559ae2fe508e5a4cecc896540baebc1b60e79cb6e00984eaf57740b5fe67424</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.16.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">6a283f0041149a6801884c22c90f3b5b35a78b645062fc0b84adb685fc67023e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2842</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-05-14 00:00:00"/>
    <updated date="2024-05-16 07:52:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2842" id="RHSA-2024:2842" type="rhsa" title="RHSA-2024:2842"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2842.html" id="ALSA-2024:2842" type="self" title="ALSA-2024:2842"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.105" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.105-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5af4400e0474925cd3661b30cc38af01c218f940c086fa8821a175d2740d5bbf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2843</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-05-15 00:00:00"/>
    <updated date="2024-05-16 07:51:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2843" id="RHSA-2024:2843" type="rhsa" title="RHSA-2024:2843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2843.html" id="ALSA-2024:2843" type="self" title="ALSA-2024:2843"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.119" release="1.el9_4" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el9_4.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.119-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7f88c9f1e140e77a561dba1e728b812e1680d5d04e30fec45173d9d15c2f34c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3306</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-11-03 22:11:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
  * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
  * kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673)
  * kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3306" id="RHSA-2024:3306" type="rhsa" title="RHSA-2024:3306"/>
      <reference href="https://bugzilla.redhat.com/2270879" id="2270879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270881" id="2270881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272816" id="2272816" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273423" id="2273423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3306.html" id="ALSA-2024:3306" type="self" title="ALSA-2024:3306"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26642.html" id="CVE-2024-26642" type="cve" title="CVE-2024-26642"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26643.html" id="CVE-2024-26643" type="cve" title="CVE-2024-26643"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26673.html" id="CVE-2024-26673" type="cve" title="CVE-2024-26673"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26804.html" id="CVE-2024-26804" type="cve" title="CVE-2024-26804"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-35890.html" id="CVE-2024-35890" type="cve" title="CVE-2024-35890"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">36059fe4c160ae79f3bd04b43d44d76de980e962a58a6ddda304736720202a28</sum>
        </package>
        <package name="libperf" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.18.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">8482f5fa3f3886fc56d8924ee4da441da2a5ba2825cbfb327521016c46187c2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3339</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-28 10:18:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT
(CVE-2024-2961)
* glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)
* glibc: null pointer dereferences after failed netgroup cache insertion
(CVE-2024-33600)
* glibc: netgroup cache may terminate daemon on memory allocation failure
(CVE-2024-33601)
* glibc: netgroup cache assumes NSS callback uses in-buffer strings
(CVE-2024-33602)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3339" id="RHSA-2024:3339" type="rhsa" title="RHSA-2024:3339"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2961" id="CVE-2024-2961" type="cve" title="CVE-2024-2961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33599" id="CVE-2024-33599" type="cve" title="CVE-2024-33599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33600" id="CVE-2024-33600" type="cve" title="CVE-2024-33600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33601" id="CVE-2024-33601" type="cve" title="CVE-2024-33601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33602" id="CVE-2024-33602" type="cve" title="CVE-2024-33602"/>
      <reference href="https://bugzilla.redhat.com/2273404" id="2273404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277202" id="2277202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277204" id="2277204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277205" id="2277205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277206" id="2277206" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3339.html" id="ALSA-2024:3339" type="self" title="ALSA-2024:3339"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="nss_db" version="2.34" release="100.el9_4.2" epoch="0" arch="s390x" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>nss_db-2.34-100.el9_4.2.s390x.rpm</filename>
          <sum type="sha256">3b2f0b957f4e27f7a4be55c911c2cce7a59bf57617e2c196228b61a4a6de9d0e</sum>
        </package>
        <package name="glibc-static" version="2.34" release="100.el9_4.2" epoch="0" arch="s390x" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-static-2.34-100.el9_4.2.s390x.rpm</filename>
          <sum type="sha256">8d4a445cb8136aa663a229047698b93b8b6b390841a08847a9b5db10aff7786b</sum>
        </package>
        <package name="nss_hesiod" version="2.34" release="100.el9_4.2" epoch="0" arch="s390x" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>nss_hesiod-2.34-100.el9_4.2.s390x.rpm</filename>
          <sum type="sha256">98daccbdd3411f75b3eec5dcca41b0b7dc3037f961820a23f164fe6f62ee4422</sum>
        </package>
        <package name="glibc-nss-devel" version="2.34" release="100.el9_4.2" epoch="0" arch="s390x" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-nss-devel-2.34-100.el9_4.2.s390x.rpm</filename>
          <sum type="sha256">c92275f6a90280242e8a93b3d1ad481fc36055c542f1b2a3834507b3db20102c</sum>
        </package>
        <package name="glibc-benchtests" version="2.34" release="100.el9_4.2" epoch="0" arch="s390x" src="glibc-2.34-100.el9_4.2.src.rpm">
          <filename>glibc-benchtests-2.34-100.el9_4.2.s390x.rpm</filename>
          <sum type="sha256">e36a60002a56b1b0622fd06a580f34f5e6693bd7005dd90703640433bd7b9eff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3501</id>
    <title>Moderate: nghttp2 security update</title>
    <issued date="2024-05-30 00:00:00"/>
    <updated date="2024-05-30 20:12:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3501" id="RHSA-2024:3501" type="rhsa" title="RHSA-2024:3501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28182" id="CVE-2024-28182" type="cve" title="CVE-2024-28182"/>
      <reference href="https://bugzilla.redhat.com/2268639" id="2268639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3501.html" id="ALSA-2024:3501" type="self" title="ALSA-2024:3501"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="nghttp2" version="1.43.0" release="5.el9_4.3" epoch="0" arch="s390x" src="nghttp2-1.43.0-5.el9_4.3.src.rpm">
          <filename>nghttp2-1.43.0-5.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">19cfd3cc6191ab58c8b9f92551a8b873ff10f25d15c1340da397b5bba8eb4788</sum>
        </package>
        <package name="libnghttp2-devel" version="1.43.0" release="5.el9_4.3" epoch="0" arch="s390x" src="nghttp2-1.43.0-5.el9_4.3.src.rpm">
          <filename>libnghttp2-devel-1.43.0-5.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">7b0730f815e8caf56e4bdefa91bac9ad33045154ada94229120759ed08b50a8d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3619</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-06-05 00:00:00"/>
    <updated date="2024-11-03 22:14:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
  * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3619" id="RHSA-2024:3619" type="rhsa" title="RHSA-2024:3619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26735" id="CVE-2024-26735" type="cve" title="CVE-2024-26735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26993" id="CVE-2024-26993" type="cve" title="CVE-2024-26993"/>
      <reference href="https://bugzilla.redhat.com/2273278" id="2273278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278314" id="2278314" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3619.html" id="ALSA-2024:3619" type="self" title="ALSA-2024:3619"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">33b5defedba2c5b11a80f94cdff0074b65b2eb306c3ba26f7d9d80e0dceb2c38</sum>
        </package>
        <package name="libperf" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.20.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">77c11b7fb291ee2660b2f4ad5fddeac35bf5bb912fae4e8aa9568ff95965f4ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3754</id>
    <title>Important: ipa security update</title>
    <issued date="2024-06-10 00:00:00"/>
    <updated date="2024-06-20 16:08:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* freeipa: delegation rules allow a proxy service to impersonate any user to access another target service (CVE-2024-2698)
* freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force (CVE-2024-3183)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3754" id="RHSA-2024:3754" type="rhsa" title="RHSA-2024:3754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2698" id="CVE-2024-2698" type="cve" title="CVE-2024-2698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3183" id="CVE-2024-3183" type="cve" title="CVE-2024-3183"/>
      <reference href="https://bugzilla.redhat.com/2270353" id="2270353" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270685" id="2270685" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3754.html" id="ALSA-2024:3754" type="self" title="ALSA-2024:3754"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3-ipatests" version="4.11.0" release="15.el9_4.alma.1" epoch="0" arch="noarch" src="ipa-4.11.0-15.el9_4.alma.1.src.rpm">
          <filename>python3-ipatests-4.11.0-15.el9_4.alma.1.noarch.rpm</filename>
          <sum type="sha256">78a871b98a4d70c7e4965a260510e083551216826811b20ae35783e13bdd5fdd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3837</id>
    <title>Important: 389-ds-base security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-14 06:41:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base
packages include the Lightweight Directory Access Protocol (LDAP) server and
command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)
* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3837" id="RHSA-2024:3837" type="rhsa" title="RHSA-2024:3837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2199" id="CVE-2024-2199" type="cve" title="CVE-2024-2199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3657" id="CVE-2024-3657" type="cve" title="CVE-2024-3657"/>
      <reference href="https://bugzilla.redhat.com/2267976" id="2267976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274401" id="2274401" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3837.html" id="ALSA-2024:3837" type="self" title="ALSA-2024:3837"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="389-ds-base-devel" version="2.4.5" release="8.el9_4" epoch="0" arch="s390x" src="389-ds-base-2.4.5-8.el9_4.src.rpm">
          <filename>389-ds-base-devel-2.4.5-8.el9_4.s390x.rpm</filename>
          <sum type="sha256">9d3cb10dc814d7e80e7ad5747c47f666e9cf259e110b460aabf7acb7bf951fd6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3838</id>
    <title>Moderate: ruby security update</title>
    <issued date="2024-06-11 00:00:00"/>
    <updated date="2024-06-13 13:18:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

The following packages have been upgraded to a later upstream version: ruby
(3.0). (AlmaLinux-35740)

Security Fix(es):

* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
* ruby: ReDoS vulnerability in URI (CVE-2023-28755)
* ruby: ReDoS vulnerability in Time (CVE-2023-28756)
* ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)
* ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)
* ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3838" id="RHSA-2024:3838" type="rhsa" title="RHSA-2024:3838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33621" id="CVE-2021-33621" type="cve" title="CVE-2021-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28755" id="CVE-2023-28755" type="cve" title="CVE-2023-28755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28756" id="CVE-2023-28756" type="cve" title="CVE-2023-28756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27280" id="CVE-2024-27280" type="cve" title="CVE-2024-27280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27281" id="CVE-2024-27281" type="cve" title="CVE-2024-27281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27282" id="CVE-2024-27282" type="cve" title="CVE-2024-27282"/>
      <reference href="https://bugzilla.redhat.com/2149706" id="2149706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184059" id="2184059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184061" id="2184061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270749" id="2270749" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270750" id="2270750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276810" id="2276810" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3838.html" id="ALSA-2024:3838" type="self" title="ALSA-2024:3838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="ruby-doc" version="3.0.7" release="162.el9_4" epoch="0" arch="noarch" src="ruby-3.0.7-162.el9_4.src.rpm">
          <filename>ruby-doc-3.0.7-162.el9_4.noarch.rpm</filename>
          <sum type="sha256">08fa7f7a8c78fdb7c1bcc7a1c92de0956e0c4e18dc0c8953ef596a1a75bec22b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3959</id>
    <title>Important: flatpak security update</title>
    <issued date="2024-06-17 00:00:00"/>
    <updated date="2024-06-19 09:13:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flatpak security update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

* flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3959" id="RHSA-2024:3959" type="rhsa" title="RHSA-2024:3959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32462" id="CVE-2024-32462" type="cve" title="CVE-2024-32462"/>
      <reference href="https://bugzilla.redhat.com/2275981" id="2275981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3959.html" id="ALSA-2024:3959" type="self" title="ALSA-2024:3959"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="flatpak-devel" version="1.12.9" release="1.el9_4" epoch="0" arch="s390x" src="flatpak-1.12.9-1.el9_4.src.rpm">
          <filename>flatpak-devel-1.12.9-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">c5c3db2e7d85a7288b76553b8625181a06a257e4c3780815415b402968ac5704</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3999</id>
    <title>Important: ghostscript security update</title>
    <issued date="2024-06-20 00:00:00"/>
    <updated date="2024-06-20 11:33:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3999" id="RHSA-2024:3999" type="rhsa" title="RHSA-2024:3999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33871" id="CVE-2024-33871" type="cve" title="CVE-2024-33871"/>
      <reference href="https://bugzilla.redhat.com/2283508" id="2283508" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3999.html" id="ALSA-2024:3999" type="self" title="ALSA-2024:3999"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libgs-devel" version="9.54.0" release="16.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-16.el9_4.src.rpm">
          <filename>libgs-devel-9.54.0-16.el9_4.s390x.rpm</filename>
          <sum type="sha256">1bcd4847fd20e6f108e876feafc640e40c4535252da121454d90d0fd31b9955a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4077</id>
    <title>Important: python3.11 security update</title>
    <issued date="2024-06-25 00:00:00"/>
    <updated date="2024-06-25 13:57:27"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4077" id="RHSA-2024:4077" type="rhsa" title="RHSA-2024:4077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4077.html" id="ALSA-2024:4077" type="self" title="ALSA-2024:4077"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.11-debug" version="3.11.7" release="1.el9_4.1" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">56f13dcf5d2b2f4e2c70cf340f919738bafc4cf4fc9cfe695d39fa5f58133083</sum>
        </package>
        <package name="python3.11-test" version="3.11.7" release="1.el9_4.1" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-test-3.11.7-1.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">5f5e98c36a7e5d7f641dceaa320f264c9867c0a67a48687d285f94757b8eec4f</sum>
        </package>
        <package name="python3.11-idle" version="3.11.7" release="1.el9_4.1" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.1.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">b069c89111207ab1682191c282cd0316c18d17122c643d71f931561d20cd6a03</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4078</id>
    <title>Important: python3.9 security update</title>
    <issued date="2024-06-25 00:00:00"/>
    <updated date="2024-06-25 13:58:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4078" id="RHSA-2024:4078" type="rhsa" title="RHSA-2024:4078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4078.html" id="ALSA-2024:4078" type="self" title="ALSA-2024:4078"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3-debug" version="3.9.18" release="3.el9_4.1" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-debug-3.9.18-3.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">24fe9dda92c94f42000d55763f7849b91168247fbf5dc2798694818a843c6fe4</sum>
        </package>
        <package name="python3-test" version="3.9.18" release="3.el9_4.1" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-test-3.9.18-3.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">3b9b4c91c0f2d0b0b37fcb4b6d800e3f5c9078b88a0a6c0d1c291c3a5cb05431</sum>
        </package>
        <package name="python3-idle" version="3.9.18" release="3.el9_4.1" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.1.src.rpm">
          <filename>python3-idle-3.9.18-3.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">884145416a485559d2404fef93576f2774e2ec8715fcf22bbe358f2a4c30f3ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4349</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-11-03 22:17:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626)
  * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801)
  * kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974)
  * kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393)
  * kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
  * kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870)
  * kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960)
  * kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400)


Bug Fix(es):  

  * cifs - kernel panic with cifs_put_smb_ses (JIRA:AlmaLinux-28943)
  * BUG: unable to handle page fault for address: ff16bf752f593ff8 [almalinux-9.4.z] (JIRA:AlmaLinux-35672)
  * [HPE 9.4 Bug] Request merge of AMD address translation library patch series [almalinux-9.4.z] (JIRA:AlmaLinux-36220)
  * [AlmaLinux9] kernel BUG at lib/list_debug.c:51! [almalinux-9.4.z] (JIRA:AlmaLinux-36687)
  * ice: DPLL-related fixes [almalinux-9.4.z] (JIRA:AlmaLinux-36716)
  * CNB95: net/sched: update TC core to upstream v6.8 [almalinux-9.4.z] (JIRA:AlmaLinux-37641)
  * IPv6: SR: backport fixes from upstream [almalinux-9.4.z] (JIRA:AlmaLinux-37669)
  * [RFE] Backport tmpfs noswap mount option [almalinux-9.4.z] (JIRA:AlmaLinux-38252)
  * Isolated cores causing issues on latest AlmaLinux9.4 kernel and not functioning as desired. [almalinux-9.4.z] (JIRA:AlmaLinux-38595)
  * [ice] Add automatic VF reset on Tx MDD events [almalinux-9.4.z] (JIRA:AlmaLinux-39083)
  * [HPEMC AlmaLinux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [almalinux-9.4.z] (JIRA:AlmaLinux-34953)
  * bnx2x: fix crashes in PCI error handling, resource leaks [almalinux-9.4.z] (JIRA:AlmaLinux-43272)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4349" id="RHSA-2024:4349" type="rhsa" title="RHSA-2024:4349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47400" id="CVE-2021-47400" type="cve" title="CVE-2021-47400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52626" id="CVE-2023-52626" type="cve" title="CVE-2023-52626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52667" id="CVE-2023-52667" type="cve" title="CVE-2023-52667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26801" id="CVE-2024-26801" type="cve" title="CVE-2024-26801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26974" id="CVE-2024-26974" type="cve" title="CVE-2024-26974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27393" id="CVE-2024-27393" type="cve" title="CVE-2024-27393"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35870" id="CVE-2024-35870" type="cve" title="CVE-2024-35870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35960" id="CVE-2024-35960" type="cve" title="CVE-2024-35960"/>
      <reference href="https://bugzilla.redhat.com/2271680" id="2271680" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273429" id="2273429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278354" id="2278354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280745" id="2280745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281350" id="2281350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281740" id="2281740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281920" id="2281920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282336" id="2282336" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4349.html" id="ALSA-2024:4349" type="self" title="ALSA-2024:4349"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libperf" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">72a4fc7a83c969efbd85e94335a4bfe556dfc4528161a4d2a6e46bb22d32fba3</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.24.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">e5934fe93f2e8a841805b02eace35dd5cac77fcd03f9719744b5069aa59aeec8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4439</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2024-07-09 00:00:00"/>
    <updated date="2024-07-10 09:03:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.132 and Runtime 6.0.32.

Security Fix(es):

* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4439" id="RHSA-2024:4439" type="rhsa" title="RHSA-2024:4439"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4439.html" id="ALSA-2024:4439" type="self" title="ALSA-2024:4439"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.132" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el9_4.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.132-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">52a017aec3bb4912af0dddcefc40a6d531d7839483f578c132ce19950ebb0909</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4450</id>
    <title>Important: dotnet8.0 security update</title>
    <issued date="2024-07-10 00:00:00"/>
    <updated date="2024-07-11 08:47:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.107 and Runtime 8.0.7.

Security Fix(es):

* dotnet: DoS in System.Text.Json (CVE-2024-30105)
* dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264)
* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4450" id="RHSA-2024:4450" type="rhsa" title="RHSA-2024:4450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30105" id="CVE-2024-30105" type="cve" title="CVE-2024-30105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35264" id="CVE-2024-35264" type="cve" title="CVE-2024-35264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295320" id="2295320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295321" id="2295321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4450.html" id="ALSA-2024:4450" type="self" title="ALSA-2024:4450"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.107" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.107-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">78db88777135e1ccd5be44e93554b8dee95472ef0b1647c589a251178357a117</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4567</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2024-07-16 00:00:00"/>
    <updated date="2024-07-26 15:21:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4567" id="RHSA-2024:4567" type="rhsa" title="RHSA-2024:4567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21144" id="CVE-2024-21144" type="cve" title="CVE-2024-21144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297964" id="2297964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4567.html" id="ALSA-2024:4567" type="self" title="ALSA-2024:4567"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">505e354c1d7113b89103c05062b4acde74b6872ffd86f845c61ce7951b0c2e0f</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">5c7928beaa26e4537d1aa51f357fe00863baeda76977bc0218d0e7eec07c6d83</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">b709b8a6bfc5704a9203e01886813957e18ae080775f3929fdfe1fd919860810</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">b9eaf10be0080bd4b75ce386b659aa8a2decb62bf4549b2da6a73d4add728b29</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">c5582cf5e8613db958df2f7e2a3d8a811e286b28506b060ea2e7735ef79b5ab4</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">cd871e4276ad9e0b80eec98b5b546ff228eb7a9cf08a48d25e1af1e31be60502</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.24.0.8" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.24.0.8-2.el9.s390x.rpm</filename>
          <sum type="sha256">eebb065a897f6a2023291c2075ed698623a1f7c18045e927a6281152fa92cd7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4568</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:12:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4568" id="RHSA-2024:4568" type="rhsa" title="RHSA-2024:4568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4568.html" id="ALSA-2024:4568" type="self" title="ALSA-2024:4568"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">18b3a06e2356708dac5490b3745b5d9ac73719d1d5ba2925c690d7c90001b6d1</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">341f3b2f69b054c5ffc1aeaab4ab8c21f2341995fc4c34ecd0b639bbf7718b2c</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">3a597c62d613de3f4fd23c4ac097776799ed275301e461623cc255593cb81b05</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">4a9b988b4169613fc929c260d3888b0fd897b2ac663556a53498b0eae6258f93</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">52662dc6597bba8147e7e3a3bdd267577c9a8bd692e3523a57f7926a1ad77d0c</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">577c63c84ff94db7303239c692129fddd996a49626df53ccc4dc9edab725e51a</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.12.0.7" release="2.el9" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el9.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.12.0.7-2.el9.s390x.rpm</filename>
          <sum type="sha256">f0a3988d094f6cebf14eb2a761c4b63f72c6c64c2a1bdd6f2df30d4928dd6598</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4573</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:20:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4573" id="RHSA-2024:4573" type="rhsa" title="RHSA-2024:4573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4573.html" id="ALSA-2024:4573" type="self" title="ALSA-2024:4573"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">241fb0cf69c64365c54552515934e6b3e884902407732cc9f8696804aca1690e</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">6ff7793d93d4d32de1fa90601db1f88bee28dd648fdb1d976460c3600212c8ad</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">920120466e848a802f1bf965fd1c5394bb6b987716066c4c66e9d48e4f05d0e1</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">9aa29725145335ae7999dae3adfccfdf020e4b74fb58cfc55360d80f9493a191</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d20859fbf88e28cd2eef4d813047e90263d27acd007cac4c931f0240ce92bcb3</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e40031ee5da99a6bdcc146a73a5fb5b01c25000cb71a22d8ca267a02affde183</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.4.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.4.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f60891f4941393b844909040fed8bf275e951a7d3af528f044660424b45a033d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4583</id>
    <title>Important: kernel security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-11-03 22:20:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
  * kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (CVE-2021-47548)
  * kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (CVE-2021-47596)
  * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
  * kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (CVE-2023-52638)
  * kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (CVE-2024-26783)
  * kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (CVE-2024-26858)
  * kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)
  * kernel: nvme: fix reconnection fail due to reserved tag allocation (CVE-2024-27435)
  * kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958)
  * kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (CVE-2024-36904)
  * kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (CVE-2024-38543)
  * kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586)
  * kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841 (CVE-2024-38593)
  * kernel: netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270)
  * kernel: octeontx2-af: avoid off-by-one read from userspace (CVE-2024-36957)
  * kernel: blk-cgroup: fix list corruption from resetting io stat (CVE-2024-38663)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4583" id="RHSA-2024:4583" type="rhsa" title="RHSA-2024:4583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47548" id="CVE-2021-47548" type="cve" title="CVE-2021-47548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47596" id="CVE-2021-47596" type="cve" title="CVE-2021-47596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48627" id="CVE-2022-48627" type="cve" title="CVE-2022-48627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52638" id="CVE-2023-52638" type="cve" title="CVE-2023-52638"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26783" id="CVE-2024-26783" type="cve" title="CVE-2024-26783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26858" id="CVE-2024-26858" type="cve" title="CVE-2024-26858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27397" id="CVE-2024-27397" type="cve" title="CVE-2024-27397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27435" id="CVE-2024-27435" type="cve" title="CVE-2024-27435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35958" id="CVE-2024-35958" type="cve" title="CVE-2024-35958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36270" id="CVE-2024-36270" type="cve" title="CVE-2024-36270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36886" id="CVE-2024-36886" type="cve" title="CVE-2024-36886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36904" id="CVE-2024-36904" type="cve" title="CVE-2024-36904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36957" id="CVE-2024-36957" type="cve" title="CVE-2024-36957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38543" id="CVE-2024-38543" type="cve" title="CVE-2024-38543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38586" id="CVE-2024-38586" type="cve" title="CVE-2024-38586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38593" id="CVE-2024-38593" type="cve" title="CVE-2024-38593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38663" id="CVE-2024-38663" type="cve" title="CVE-2024-38663"/>
      <reference href="https://bugzilla.redhat.com/2267509" id="2267509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273082" id="2273082" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273466" id="2273466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275735" id="2275735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277238" id="2277238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280434" id="2280434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281131" id="2281131" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281925" id="2281925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283401" id="2283401" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284541" id="2284541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284581" id="2284581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293230" id="2293230" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293380" id="2293380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293402" id="2293402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293456" id="2293456" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293653" id="2293653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294225" id="2294225" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4583.html" id="ALSA-2024:4583" type="self" title="ALSA-2024:4583"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libperf" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">848c9a9cd9a571e592924b90fa8f44295c563e252acb69e9dd72ef3ec6247a53</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.26.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">9c2f36a87be3bfac174c3fbc8527c5dc320d661fd7613c740b397d288928718c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4623</id>
    <title>Important: qt5-qtbase security update</title>
    <issued date="2024-07-18 00:00:00"/>
    <updated date="2024-07-19 10:22:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4623" id="RHSA-2024:4623" type="rhsa" title="RHSA-2024:4623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39936" id="CVE-2024-39936" type="cve" title="CVE-2024-39936"/>
      <reference href="https://bugzilla.redhat.com/2295867" id="2295867" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4623.html" id="ALSA-2024:4623" type="self" title="ALSA-2024:4623"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="qt5-qtbase-static" version="5.15.9" release="10.el9_4" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-10.el9_4.src.rpm">
          <filename>qt5-qtbase-static-5.15.9-10.el9_4.s390x.rpm</filename>
          <sum type="sha256">9ca9f36a9be356aab2094334ee06086fdd33aa51b0a15fc30ab9d9b07bf3823b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4749</id>
    <title>Moderate: edk2 security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-25 08:35:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. 

Security Fix(es):

* EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)
* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)
* edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4749" id="RHSA-2024:4749" type="rhsa" title="RHSA-2024:4749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36765" id="CVE-2022-36765" type="cve" title="CVE-2022-36765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45236" id="CVE-2023-45236" type="cve" title="CVE-2023-45236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45237" id="CVE-2023-45237" type="cve" title="CVE-2023-45237"/>
      <reference href="https://bugzilla.redhat.com/2257584" id="2257584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258703" id="2258703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258706" id="2258706" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4749.html" id="ALSA-2024:4749" type="self" title="ALSA-2024:4749"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="edk2-ovmf" version="20231122" release="6.el9_4.2" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.2.src.rpm">
          <filename>edk2-ovmf-20231122-6.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">07ab65898528b14bd133dcc29037207a0575b113ba24d06b8ec9fb9a2740a4a8</sum>
        </package>
        <package name="edk2-aarch64" version="20231122" release="6.el9_4.2" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.2.src.rpm">
          <filename>edk2-aarch64-20231122-6.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">9a5248396531529aa0a93ef15d4a30176a9c18dced35b724cbc45a4b1e0b3784</sum>
        </package>
        <package name="edk2-tools-doc" version="20231122" release="6.el9_4.2" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.2.src.rpm">
          <filename>edk2-tools-doc-20231122-6.el9_4.2.noarch.rpm</filename>
          <sum type="sha256">c756059b460fd70f02088389aa5bc06026f457801491df61042de96189563f25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4756</id>
    <title>Moderate: libuv security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 15:07:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libuv security update</summary>
    <description>libuv is a multi-platform support library with a focus on asynchronous I/O. 

Security Fix(es):

* libuv: Improper Domain Lookup that potentially leads to SSRF attacks (CVE-2024-24806)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4756" id="RHSA-2024:4756" type="rhsa" title="RHSA-2024:4756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24806" id="CVE-2024-24806" type="cve" title="CVE-2024-24806"/>
      <reference href="https://bugzilla.redhat.com/2263292" id="2263292" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4756.html" id="ALSA-2024:4756" type="self" title="ALSA-2024:4756"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libuv-devel" version="1.42.0" release="2.el9_4" epoch="1" arch="s390x" src="libuv-1.42.0-2.el9_4.src.rpm">
          <filename>libuv-devel-1.42.0-2.el9_4.s390x.rpm</filename>
          <sum type="sha256">d5736a99625818827faba825d3a6fb42b2caffd50a63731115f9352d67212176</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4757</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-25 08:13:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* libvirt: stack use-after-free in virNetClientIOEventLoop() (CVE-2024-4418)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4757" id="RHSA-2024:4757" type="rhsa" title="RHSA-2024:4757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4418" id="CVE-2024-4418" type="cve" title="CVE-2024-4418"/>
      <reference href="https://bugzilla.redhat.com/2278616" id="2278616" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4757.html" id="ALSA-2024:4757" type="self" title="ALSA-2024:4757"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libvirt-daemon-plugin-sanlock" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">09d7b4c473aab4916c26bc64ea6570b6d59f8f6a27ed44959355a7e989963da1</sum>
        </package>
        <package name="libvirt-docs" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-docs-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">40ab56b1209138eee043177480b39a2c0214dbfc06796918838e96f23de30a4f</sum>
        </package>
        <package name="libvirt-devel" version="10.0.0" release="6.6.el9_4.alma.1" epoch="0" arch="s390x" src="libvirt-10.0.0-6.6.el9_4.alma.1.src.rpm">
          <filename>libvirt-devel-10.0.0-6.6.el9_4.alma.1.s390x.rpm</filename>
          <sum type="sha256">e651edf307444dc850893dcd1dee2b935f9c9f659b7e4ba741f343e9713e8160</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4766</id>
    <title>Low: python3 security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 13:07:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4766" id="RHSA-2024:4766" type="rhsa" title="RHSA-2024:4766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4766.html" id="ALSA-2024:4766" type="self" title="ALSA-2024:4766"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.11-debug" version="3.11.7" release="1.el9_4.3" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.3.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">04a23771100a0e30934ddaa1c7e843bfda32fb4c43fc00db8f3f7ffa709d92a2</sum>
        </package>
        <package name="python3.11-test" version="3.11.7" release="1.el9_4.3" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.3.src.rpm">
          <filename>python3.11-test-3.11.7-1.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">3b523c6329249a84c6ae8286eb7c2301aaa672552df64bdaf715d8d7f10025a0</sum>
        </package>
        <package name="python3.11-idle" version="3.11.7" release="1.el9_4.3" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.3.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">a12f831e498f31a6d7f9bb8ab576b6b697ffa865e7c8e24fae5670b04e3e8e00</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4779</id>
    <title>Low: python3 security update</title>
    <issued date="2024-07-23 00:00:00"/>
    <updated date="2024-07-24 13:02:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4779" id="RHSA-2024:4779" type="rhsa" title="RHSA-2024:4779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4779.html" id="ALSA-2024:4779" type="self" title="ALSA-2024:4779"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3-idle" version="3.9.18" release="3.el9_4.3" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.3.src.rpm">
          <filename>python3-idle-3.9.18-3.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">0e277c9552c53ff7a012b1f4cf82722387a9cc05c2c47113e0507865e2cee46a</sum>
        </package>
        <package name="python3-test" version="3.9.18" release="3.el9_4.3" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.3.src.rpm">
          <filename>python3-test-3.9.18-3.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">f63778866cf40455803aca25311e91af0ce610ac6b6aff1312d87fbf19574955</sum>
        </package>
        <package name="python3-debug" version="3.9.18" release="3.el9_4.3" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.3.src.rpm">
          <filename>python3-debug-3.9.18-3.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">fa6b035e5d309eb13767087e60144a36bb17abd4dae049842e1344717f966b2a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4928</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-07-31 00:00:00"/>
    <updated date="2024-11-03 22:23:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned (CVE-2023-52458)
  * kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (CVE-2024-26773)
  * kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (CVE-2024-26737)
  * kernel: dm: call the resume method on internal suspend (CVE-2024-26880)
  * kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (CVE-2024-26852)
  * kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
  * kernel: nfp: flower: handle acti_netdevs allocation failure (CVE-2024-27046)
  * kernel: octeontx2-af: Use separate handlers for interrupts (CVE-2024-27030)
  * kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() (CVE-2024-35857)
  * kernel: mlxbf_gige: call request_irq() after NAPI initialized (CVE-2024-35907)
  * kernel: mlxbf_gige: stop interface during shutdown (CVE-2024-35885)
  * kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (CVE-2023-52809)
  * kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (CVE-2021-47459)
  * kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (CVE-2024-36924)
  * kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (CVE-2024-36952)
  * kernel: net: amd-xgbe: Fix skb data length underflow (CVE-2022-48743)
  * kernel: epoll: be better about file lifetimes (CVE-2024-38580)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4928" id="RHSA-2024:4928" type="rhsa" title="RHSA-2024:4928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47459" id="CVE-2021-47459" type="cve" title="CVE-2021-47459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48743" id="CVE-2022-48743" type="cve" title="CVE-2022-48743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52458" id="CVE-2023-52458" type="cve" title="CVE-2023-52458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52809" id="CVE-2023-52809" type="cve" title="CVE-2023-52809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26737" id="CVE-2024-26737" type="cve" title="CVE-2024-26737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26773" id="CVE-2024-26773" type="cve" title="CVE-2024-26773"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26852" id="CVE-2024-26852" type="cve" title="CVE-2024-26852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26880" id="CVE-2024-26880" type="cve" title="CVE-2024-26880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26982" id="CVE-2024-26982" type="cve" title="CVE-2024-26982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27030" id="CVE-2024-27030" type="cve" title="CVE-2024-27030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27046" id="CVE-2024-27046" type="cve" title="CVE-2024-27046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35857" id="CVE-2024-35857" type="cve" title="CVE-2024-35857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35885" id="CVE-2024-35885" type="cve" title="CVE-2024-35885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35907" id="CVE-2024-35907" type="cve" title="CVE-2024-35907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36924" id="CVE-2024-36924" type="cve" title="CVE-2024-36924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36952" id="CVE-2024-36952" type="cve" title="CVE-2024-36952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38580" id="CVE-2024-38580" type="cve" title="CVE-2024-38580"/>
      <reference href="https://bugzilla.redhat.com/2265794" id="2265794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273236" id="2273236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273274" id="2273274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275690" id="2275690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275761" id="2275761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278337" id="2278337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278435" id="2278435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278473" id="2278473" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281247" id="2281247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281647" id="2281647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281700" id="2281700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282669" id="2282669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282898" id="2282898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284506" id="2284506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284598" id="2284598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293316" id="2293316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293412" id="2293412" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4928.html" id="ALSA-2024:4928" type="self" title="ALSA-2024:4928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libperf" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">104d66173fe54230ad353fc58828a153ddc52cee76c0be90e34faaa73de62e41</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.28.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">f31cbe3c9c46a09927d2ff9a71e06c09bffbfd005ecc240c416ba12cb2263669</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4935</id>
    <title>Important: freeradius security update</title>
    <issued date="2024-07-31 00:00:00"/>
    <updated date="2024-08-06 20:53:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freeradius security update</summary>
    <description>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

* freeradius: forgery attack (CVE-2024-3596)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4935" id="RHSA-2024:4935" type="rhsa" title="RHSA-2024:4935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3596" id="CVE-2024-3596" type="cve" title="CVE-2024-3596"/>
      <reference href="https://bugzilla.redhat.com/2263240" id="2263240" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4935.html" id="ALSA-2024:4935" type="self" title="ALSA-2024:4935"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="freeradius-mysql" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-mysql-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">3b078b4c432bc070adc98f102cf4b0d55113e45a1d36ff3700b7b93208cad216</sum>
        </package>
        <package name="freeradius-perl" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-perl-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">46f4582985044f490fda073681f9f318ea000152f292e629fe643b0efbbdb01c</sum>
        </package>
        <package name="freeradius-postgresql" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-postgresql-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">56ade177d208dd19e707b748167d34b802542635e2c1c2c92638ae2767b51b9b</sum>
        </package>
        <package name="freeradius-rest" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-rest-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">6986cb5aa07056479a15388c51512bad286a8e6e32d0352586811a8866b8d14a</sum>
        </package>
        <package name="freeradius-unixODBC" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-unixODBC-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">ceac0ecb6aa91b7169748670cd27f70c980cc56c7c9d5a1f5a939639ec764cba</sum>
        </package>
        <package name="freeradius-sqlite" version="3.0.21" release="40.el9_4" epoch="0" arch="s390x" src="freeradius-3.0.21-40.el9_4.src.rpm">
          <filename>freeradius-sqlite-3.0.21-40.el9_4.s390x.rpm</filename>
          <sum type="sha256">d7dde466198e358e519cae8913c17172cf2337d72e9424bd03053f3c52b102de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5192</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2024-08-12 00:00:00"/>
    <updated date="2024-08-13 06:44:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)
* 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request (CVE-2024-6237)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5192" id="RHSA-2024:5192" type="rhsa" title="RHSA-2024:5192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5953" id="CVE-2024-5953" type="cve" title="CVE-2024-5953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6237" id="CVE-2024-6237" type="cve" title="CVE-2024-6237"/>
      <reference href="https://bugzilla.redhat.com/2292104" id="2292104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293579" id="2293579" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5192.html" id="ALSA-2024:5192" type="self" title="ALSA-2024:5192"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="389-ds-base-devel" version="2.4.5" release="9.el9_4" epoch="0" arch="s390x" src="389-ds-base-2.4.5-9.el9_4.src.rpm">
          <filename>389-ds-base-devel-2.4.5-9.el9_4.s390x.rpm</filename>
          <sum type="sha256">4840dd677ba9d8c550a50979970d78180da6b96b2b67349b07b4a4b408e0b710</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5231</id>
    <title>Important: bind and bind-dyndb-ldap security update</title>
    <issued date="2024-08-15 00:00:00"/>
    <updated date="2024-08-28 15:57:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind and bind-dyndb-ldap security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam (CVE-2024-1737)
* bind9: bind: SIG(0) can be used to exhaust CPU resources (CVE-2024-1975)
* bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content (CVE-2024-4076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5231" id="RHSA-2024:5231" type="rhsa" title="RHSA-2024:5231"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1737" id="CVE-2024-1737" type="cve" title="CVE-2024-1737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1975" id="CVE-2024-1975" type="cve" title="CVE-2024-1975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4076" id="CVE-2024-4076" type="cve" title="CVE-2024-4076"/>
      <reference href="https://bugzilla.redhat.com/2298893" id="2298893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298901" id="2298901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298904" id="2298904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5231.html" id="ALSA-2024:5231" type="self" title="ALSA-2024:5231"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="bind-doc" version="9.16.23" release="18.el9_4.6" epoch="32" arch="noarch" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-doc-9.16.23-18.el9_4.6.noarch.rpm</filename>
          <sum type="sha256">a5ec8a6da6cd1f20a2976b83bb6408fc04182069d72450b79a1f8eac28b51e2b</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="18.el9_4.6" epoch="32" arch="s390x" src="bind-9.16.23-18.el9_4.6.src.rpm">
          <filename>bind-devel-9.16.23-18.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">c743261a6ea40ac4e7b5aba894990e8a59895e9858bd781b72a13dc97346530a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5334</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-08-15 00:00:00"/>
    <updated date="2024-08-21 12:17:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.108 and .NET Runtime 8.0.8.

Security Fix(es):

* dotnet: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* EMBARGOED CVE-2024-38167 dotnet8.0: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5334" id="RHSA-2024:5334" type="rhsa" title="RHSA-2024:5334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38167" id="CVE-2024-38167" type="cve" title="CVE-2024-38167"/>
      <reference href="https://bugzilla.redhat.com/2302428" id="2302428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5334.html" id="ALSA-2024:5334" type="self" title="ALSA-2024:5334"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.108" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.108-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">fe3cab0030854986cb4cf0af2a39f3c03fa59f5c6dd0b72d324f1e1f55ffb216</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5363</id>
    <title>Important: kernel security update</title>
    <issued date="2024-08-14 00:00:00"/>
    <updated date="2024-11-03 22:25:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  
Security Fix(es):  

  * kernel: phy: (CVE-2024-26600)
  * kernel: netfilter: multiple flaws (CVE-2024-26808, CVE-2024-27065, CVE-2024-35899, CVE-2024-36005)
  * kernel: cifs: (CVE-2024-26828)
  * kernel: wifi: multiple flaws (CVE-2024-26897, CVE-2024-27052, CVE-2024-27049, CVE-2023-52651, CVE-2024-35789, CVE-2024-27434, CVE-2024-35845, CVE-2024-35937, CVE-2024-36941, CVE-2024-36922, CVE-2024-36921, CVE-2024-38575)
  * kernel: nfs: (CVE-2024-26868)
  * kernel: igc: (CVE-2024-26853)
  * kernel: dmaengine/idxd: (CVE-2024-21823)
  * kernel: ipv6: multiple flaws (CVE-2024-27417, CVE-2024-35969, CVE-2024-36903, CVE-2024-40961)
  * kernel: vt: (CVE-2024-35823)
  * kernel: efi: (CVE-2024-35800)
  * kernel: mlxsw: (CVE-2024-35852)
  * kernel: eeprom: (CVE-2024-35848)
  * kernel: ice: (CVE-2024-35911)
  * kernel: platform/x86: (CVE-2023-52864)
  * kernel: i40e: (CVE-2024-36020)
  * kernel: rtnetlink: (CVE-2024-36017)
  * kernel: net: multiple flaws (CVE-2024-36929, CVE-2024-36971, CVE-2021-47606, CVE-2024-38558, CVE-2024-40928, CVE-2024-40954)
  * kernel: ipvlan: (CVE-2024-33621)
  * kernel: tcp: (CVE-2024-37356)
  * kernel: virtio: (CVE-2024-37353)
  * kernel: tls: (CVE-2024-36489)
  * kernel: cxl/region: (CVE-2024-38391)
  * kernel: bonding: (CVE-2024-39487)
  * kernel: netns: (CVE-2024-40958)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5363" id="RHSA-2024:5363" type="rhsa" title="RHSA-2024:5363"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47606" id="CVE-2021-47606" type="cve" title="CVE-2021-47606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52651" id="CVE-2023-52651" type="cve" title="CVE-2023-52651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52864" id="CVE-2023-52864" type="cve" title="CVE-2023-52864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21823" id="CVE-2024-21823" type="cve" title="CVE-2024-21823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26600" id="CVE-2024-26600" type="cve" title="CVE-2024-26600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26808" id="CVE-2024-26808" type="cve" title="CVE-2024-26808"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26828" id="CVE-2024-26828" type="cve" title="CVE-2024-26828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26853" id="CVE-2024-26853" type="cve" title="CVE-2024-26853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26868" id="CVE-2024-26868" type="cve" title="CVE-2024-26868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26897" id="CVE-2024-26897" type="cve" title="CVE-2024-26897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27049" id="CVE-2024-27049" type="cve" title="CVE-2024-27049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27052" id="CVE-2024-27052" type="cve" title="CVE-2024-27052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27065" id="CVE-2024-27065" type="cve" title="CVE-2024-27065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27417" id="CVE-2024-27417" type="cve" title="CVE-2024-27417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27434" id="CVE-2024-27434" type="cve" title="CVE-2024-27434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33621" id="CVE-2024-33621" type="cve" title="CVE-2024-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35789" id="CVE-2024-35789" type="cve" title="CVE-2024-35789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35800" id="CVE-2024-35800" type="cve" title="CVE-2024-35800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35823" id="CVE-2024-35823" type="cve" title="CVE-2024-35823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35845" id="CVE-2024-35845" type="cve" title="CVE-2024-35845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35848" id="CVE-2024-35848" type="cve" title="CVE-2024-35848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35852" id="CVE-2024-35852" type="cve" title="CVE-2024-35852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35899" id="CVE-2024-35899" type="cve" title="CVE-2024-35899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35911" id="CVE-2024-35911" type="cve" title="CVE-2024-35911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35937" id="CVE-2024-35937" type="cve" title="CVE-2024-35937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35969" id="CVE-2024-35969" type="cve" title="CVE-2024-35969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36005" id="CVE-2024-36005" type="cve" title="CVE-2024-36005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36017" id="CVE-2024-36017" type="cve" title="CVE-2024-36017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36020" id="CVE-2024-36020" type="cve" title="CVE-2024-36020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36489" id="CVE-2024-36489" type="cve" title="CVE-2024-36489"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36903" id="CVE-2024-36903" type="cve" title="CVE-2024-36903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36921" id="CVE-2024-36921" type="cve" title="CVE-2024-36921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36922" id="CVE-2024-36922" type="cve" title="CVE-2024-36922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36929" id="CVE-2024-36929" type="cve" title="CVE-2024-36929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36941" id="CVE-2024-36941" type="cve" title="CVE-2024-36941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36971" id="CVE-2024-36971" type="cve" title="CVE-2024-36971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37353" id="CVE-2024-37353" type="cve" title="CVE-2024-37353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37356" id="CVE-2024-37356" type="cve" title="CVE-2024-37356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38391" id="CVE-2024-38391" type="cve" title="CVE-2024-38391"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38558" id="CVE-2024-38558" type="cve" title="CVE-2024-38558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38575" id="CVE-2024-38575" type="cve" title="CVE-2024-38575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39487" id="CVE-2024-39487" type="cve" title="CVE-2024-39487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40928" id="CVE-2024-40928" type="cve" title="CVE-2024-40928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40954" id="CVE-2024-40954" type="cve" title="CVE-2024-40954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40958" id="CVE-2024-40958" type="cve" title="CVE-2024-40958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40961" id="CVE-2024-40961" type="cve" title="CVE-2024-40961"/>
      <reference href="https://bugzilla.redhat.com/2265838" id="2265838" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273405" id="2273405" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275600" id="2275600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275655" id="2275655" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275715" id="2275715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275748" id="2275748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278380" id="2278380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278417" id="2278417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278429" id="2278429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278519" id="2278519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278989" id="2278989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281057" id="2281057" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281097" id="2281097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281133" id="2281133" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281190" id="2281190" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281237" id="2281237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281257" id="2281257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281265" id="2281265" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281272" id="2281272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281639" id="2281639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281667" id="2281667" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281821" id="2281821" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281900" id="2281900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281949" id="2281949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282719" id="2282719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284400" id="2284400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284417" id="2284417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284474" id="2284474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284496" id="2284496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284511" id="2284511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284513" id="2284513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284543" id="2284543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292331" id="2292331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293208" id="2293208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293418" id="2293418" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293441" id="2293441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293657" id="2293657" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293658" id="2293658" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293686" id="2293686" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293687" id="2293687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293688" id="2293688" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297056" id="2297056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297512" id="2297512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297538" id="2297538" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297542" id="2297542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297545" id="2297545" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5363.html" id="ALSA-2024:5363" type="self" title="ALSA-2024:5363"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libperf" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">62eed94375dc2475a1fb6efc0b1693bb0c6c7355a74937b9602f4073da173ed7</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.31.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">74ce356e73f31c912e4b3483c4d96cd2d012d7c8f4db87d0da0bbd3f266db146</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5533</id>
    <title>Important: python3.12-setuptools security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:41:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-setuptools security update</summary>
    <description>Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages.  This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5533" id="RHSA-2024:5533" type="rhsa" title="RHSA-2024:5533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5533.html" id="ALSA-2024:5533" type="self" title="ALSA-2024:5533"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.12-setuptools-wheel" version="68.2.2" release="3.el9_4.1" epoch="0" arch="noarch" src="python3.12-setuptools-68.2.2-3.el9_4.1.src.rpm">
          <filename>python3.12-setuptools-wheel-68.2.2-3.el9_4.1.noarch.rpm</filename>
          <sum type="sha256">131b0a0f2d74e9412a6cc9f472ba83b59d41a1569d92fe31ea3e11e061212f48</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5928</id>
    <title>Important: kernel security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-11-03 22:28:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nftables: nft_set_rbtree skip end interval element from gc (CVE-2024-26581)
  * kernel: netfilter: nft_limit: reject configurations that cause integer overflow (CVE-2024-26668)
  * kernel: vfio/pci: Lock external INTx masking ops (CVE-2024-26810)
  * kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CVE-2024-26855)
  * kernel: x86/xen: Add some null pointer checking to smp.c (CVE-2024-26908)
  * kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019)
  * kernel: netfilter: flowtable: validate pppoe header (CVE-2024-27016)
  * kernel: netfilter: bridge: confirm multicast packets before passing them up the stack (CVE-2024-27415)
  * kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info (CVE-2024-35839)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898)
  * kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897)
  * kernel: netfilter: validate user input for expected length (CVE-2024-35896)
  * kernel: netfilter: complete validation of user input (CVE-2024-35962)
  * kernel: ice: fix LAG and VF lock dependency in ice_reset_vf() (CVE-2024-36003)
  * kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race (CVE-2023-52771)
  * kernel: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (CVE-2023-52880)
  * kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (CVE-2024-36025)
  * kernel: net/mlx5e: Fix netif state handling (CVE-2024-38608)
  * kernel: crypto: bcm - Fix pointer arithmetic (CVE-2024-38579)
  * kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (CVE-2024-38544)
  * kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (CVE-2024-38540)
  * kernel: net: bridge: xmit: make sure we have at least eth header len bytes (CVE-2024-38538)
  * kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (CVE-2024-39476)
  * kernel: ipv6: fix possible race in __fib6_drop_pcpu_from() (CVE-2024-40905)
  * kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station (CVE-2024-40911)
  * kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CVE-2024-40912)
  * kernel: mm/huge_memory: don&amp;#39;t unpoison huge_zero_folio (CVE-2024-40914)
  * kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CVE-2024-40929)
  * kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (CVE-2024-40939)
  * kernel: wifi: iwlwifi: mvm: don&amp;#39;t read past the mfuart notifcation (CVE-2024-40941)
  * kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (CVE-2024-40957)
  * kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978)
  * kernel: tipc: force a dst refcount before doing decryption (CVE-2024-40983)
  * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)
  * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)
  * kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (CVE-2024-41041)
  * kernel: NFSv4: Fix memory leak in nfs4_set_security_label (CVE-2024-41076)
  * kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CVE-2024-42110)
  * kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment (CVE-2024-42152)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5928" id="RHSA-2024:5928" type="rhsa" title="RHSA-2024:5928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52771" id="CVE-2023-52771" type="cve" title="CVE-2023-52771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52880" id="CVE-2023-52880" type="cve" title="CVE-2023-52880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26581" id="CVE-2024-26581" type="cve" title="CVE-2024-26581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26668" id="CVE-2024-26668" type="cve" title="CVE-2024-26668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26810" id="CVE-2024-26810" type="cve" title="CVE-2024-26810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26855" id="CVE-2024-26855" type="cve" title="CVE-2024-26855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26908" id="CVE-2024-26908" type="cve" title="CVE-2024-26908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26925" id="CVE-2024-26925" type="cve" title="CVE-2024-26925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27016" id="CVE-2024-27016" type="cve" title="CVE-2024-27016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27019" id="CVE-2024-27019" type="cve" title="CVE-2024-27019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27020" id="CVE-2024-27020" type="cve" title="CVE-2024-27020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27415" id="CVE-2024-27415" type="cve" title="CVE-2024-27415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35839" id="CVE-2024-35839" type="cve" title="CVE-2024-35839"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35896" id="CVE-2024-35896" type="cve" title="CVE-2024-35896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35897" id="CVE-2024-35897" type="cve" title="CVE-2024-35897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35898" id="CVE-2024-35898" type="cve" title="CVE-2024-35898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35962" id="CVE-2024-35962" type="cve" title="CVE-2024-35962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36003" id="CVE-2024-36003" type="cve" title="CVE-2024-36003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36025" id="CVE-2024-36025" type="cve" title="CVE-2024-36025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38538" id="CVE-2024-38538" type="cve" title="CVE-2024-38538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38540" id="CVE-2024-38540" type="cve" title="CVE-2024-38540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38544" id="CVE-2024-38544" type="cve" title="CVE-2024-38544"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38579" id="CVE-2024-38579" type="cve" title="CVE-2024-38579"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38608" id="CVE-2024-38608" type="cve" title="CVE-2024-38608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39476" id="CVE-2024-39476" type="cve" title="CVE-2024-39476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40905" id="CVE-2024-40905" type="cve" title="CVE-2024-40905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40911" id="CVE-2024-40911" type="cve" title="CVE-2024-40911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40912" id="CVE-2024-40912" type="cve" title="CVE-2024-40912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40914" id="CVE-2024-40914" type="cve" title="CVE-2024-40914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40929" id="CVE-2024-40929" type="cve" title="CVE-2024-40929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40939" id="CVE-2024-40939" type="cve" title="CVE-2024-40939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40941" id="CVE-2024-40941" type="cve" title="CVE-2024-40941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40957" id="CVE-2024-40957" type="cve" title="CVE-2024-40957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40978" id="CVE-2024-40978" type="cve" title="CVE-2024-40978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40983" id="CVE-2024-40983" type="cve" title="CVE-2024-40983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41041" id="CVE-2024-41041" type="cve" title="CVE-2024-41041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41076" id="CVE-2024-41076" type="cve" title="CVE-2024-41076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41090" id="CVE-2024-41090" type="cve" title="CVE-2024-41090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41091" id="CVE-2024-41091" type="cve" title="CVE-2024-41091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42110" id="CVE-2024-42110" type="cve" title="CVE-2024-42110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42152" id="CVE-2024-42152" type="cve" title="CVE-2024-42152"/>
      <reference href="https://bugzilla.redhat.com/2265185" id="2265185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272797" id="2272797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273654" id="2273654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275742" id="2275742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275744" id="2275744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277166" id="2277166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278256" id="2278256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278258" id="2278258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278264" id="2278264" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281101" id="2281101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281284" id="2281284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281669" id="2281669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281672" id="2281672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281675" id="2281675" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281916" id="2281916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281958" id="2281958" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282720" id="2282720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283468" id="2283468" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284421" id="2284421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293356" id="2293356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293414" id="2293414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293455" id="2293455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293459" id="2293459" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293461" id="2293461" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295914" id="2295914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297489" id="2297489" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297495" id="2297495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297496" id="2297496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297498" id="2297498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297513" id="2297513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297523" id="2297523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297525" id="2297525" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297541" id="2297541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297562" id="2297562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297567" id="2297567" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299240" id="2299240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299336" id="2299336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300410" id="2300410" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300453" id="2300453" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301473" id="2301473" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301519" id="2301519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5928.html" id="ALSA-2024:5928" type="self" title="ALSA-2024:5928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">0e3ca02fab428e23d0138e609f0fe6246d2ca427c9f2568d59b9774742d18b1e</sum>
        </package>
        <package name="libperf" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.33.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">3aada235114a35439c19b1fcc993d56032258244fa1207abbd0033f8e17a86f3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5999</id>
    <title>Important: postgresql security update</title>
    <issued date="2024-08-29 00:00:00"/>
    <updated date="2024-08-29 13:54:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

* postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5999" id="RHSA-2024:5999" type="rhsa" title="RHSA-2024:5999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7348" id="CVE-2024-7348" type="cve" title="CVE-2024-7348"/>
      <reference href="https://bugzilla.redhat.com/2303682" id="2303682" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5999.html" id="ALSA-2024:5999" type="self" title="ALSA-2024:5999"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="postgresql-test" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-test-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">05f0595e9163cc1548304cfd65ddeb18a1e3d3b42f04b2702bbe6bad8a622877</sum>
        </package>
        <package name="postgresql-docs" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-docs-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">6e98dec91ff15abaae71debc6149cb5ab5089c2c6022523bd2df325cbfc00f0e</sum>
        </package>
        <package name="postgresql-private-devel" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-private-devel-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7c0e744a935f72cfd46d6f2879c311a265bf45aaf00aa4d0e801881b686db478</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-upgrade-devel-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">7cbe62b59ed1b0e66d9a086cce98b58b84b9892a0b6c5f301fde6e735e2f0551</sum>
        </package>
        <package name="postgresql-server-devel" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-server-devel-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">aec8ba77bbb03daa1fc7ce39f2bb1eba8d3f9e069c1b92f78a9ca88e0d37fe84</sum>
        </package>
        <package name="postgresql-static" version="13.16" release="1.el9_4" epoch="0" arch="s390x" src="postgresql-13.16-1.el9_4.src.rpm">
          <filename>postgresql-static-13.16-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">ce20a5149c9b630c75ed5b7f9293ff3c871757ed82555dcb39d364a7f0df69af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6146</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-03 07:39:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.  The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately.  Documentation for Python is provided in the python3.12-docs package.  Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.

Security Fix(es):

* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6146" id="RHSA-2024:6146" type="rhsa" title="RHSA-2024:6146"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6146.html" id="ALSA-2024:6146" type="self" title="ALSA-2024:6146"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.12-debug" version="3.12.1" release="4.el9_4.3" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-debug-3.12.1-4.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">057ef4b248a4b9b360412a5b3520836fb8c53e414d5a11bc407948fd95299354</sum>
        </package>
        <package name="python3.12-idle" version="3.12.1" release="4.el9_4.3" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-idle-3.12.1-4.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">7f830497c0a21c0089f179ffdd85fc717f313fcf133bf475cd3fed789e99c68d</sum>
        </package>
        <package name="python3.12-test" version="3.12.1" release="4.el9_4.3" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.3.src.rpm">
          <filename>python3.12-test-3.12.1-4.el9_4.3.s390x.rpm</filename>
          <sum type="sha256">d36a6b1f2f56a90ad82dab589d181f5e29e7e2bfad283343313465b9231bea12</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6163</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:28:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6163" id="RHSA-2024:6163" type="rhsa" title="RHSA-2024:6163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6163.html" id="ALSA-2024:6163" type="self" title="ALSA-2024:6163"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3-idle" version="3.9.18" release="3.el9_4.5" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.5.src.rpm">
          <filename>python3-idle-3.9.18-3.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">9988e6b052409383b0325fb0bdf368f8e66cb711b44e9121913aea5408ca9d2d</sum>
        </package>
        <package name="python3-debug" version="3.9.18" release="3.el9_4.5" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.5.src.rpm">
          <filename>python3-debug-3.9.18-3.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">99bc8b8dc724f67b9f6c9eb856839ac19302e18d2ce44ba0a512c3e86a77911c</sum>
        </package>
        <package name="python3-test" version="3.9.18" release="3.el9_4.5" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.5.src.rpm">
          <filename>python3-test-3.9.18-3.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">a9bed5681549754f2c760bb77ae59a5b7447da23412471acfe4285c49759c4b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6179</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:24:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6179" id="RHSA-2024:6179" type="rhsa" title="RHSA-2024:6179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6179.html" id="ALSA-2024:6179" type="self" title="ALSA-2024:6179"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.11-idle" version="3.11.7" release="1.el9_4.5" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.5.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">1f7ce3163145944be7220d75d67291ad4dbb8c8a4216d688fa70c20129c4b9fc</sum>
        </package>
        <package name="python3.11-test" version="3.11.7" release="1.el9_4.5" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.5.src.rpm">
          <filename>python3.11-test-3.11.7-1.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">368830eaaa810e1e47dd8c1f3699ed7b4e3b7cca9e07bad23703349d21d1ca54</sum>
        </package>
        <package name="python3.11-debug" version="3.11.7" release="1.el9_4.5" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.5.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el9_4.5.s390x.rpm</filename>
          <sum type="sha256">ebee4587ff0ff815f95f6dd85a85260fbec29b1dae6c292aed621a9b5636d16a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6197</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2024-09-03 00:00:00"/>
    <updated date="2024-09-04 08:17:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: format string injection leads to shell command execution (SAFER bypass) (CVE-2024-29510)
* ghostscript: path traversal and command execution due to path reduction (CVE-2024-33869)
* ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths (CVE-2024-33870)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6197" id="RHSA-2024:6197" type="rhsa" title="RHSA-2024:6197"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-29510" id="CVE-2024-29510" type="cve" title="CVE-2024-29510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33869" id="CVE-2024-33869" type="cve" title="CVE-2024-33869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33870" id="CVE-2024-33870" type="cve" title="CVE-2024-33870"/>
      <reference href="https://bugzilla.redhat.com/2293950" id="2293950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293958" id="2293958" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293959" id="2293959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6197.html" id="ALSA-2024:6197" type="self" title="ALSA-2024:6197"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libgs-devel" version="9.54.0" release="17.el9_4" epoch="0" arch="s390x" src="ghostscript-9.54.0-17.el9_4.src.rpm">
          <filename>libgs-devel-9.54.0-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">868b43f8b1538f7083293f336d20695baacd49810e79cd41983170beb8ff1610</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6356</id>
    <title>Important: bubblewrap and flatpak security update</title>
    <issued date="2024-09-04 00:00:00"/>
    <updated date="2024-09-05 06:55:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bubblewrap and flatpak security update</summary>
    <description>Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.

Security Fix(es):

* flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6356" id="RHSA-2024:6356" type="rhsa" title="RHSA-2024:6356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42472" id="CVE-2024-42472" type="cve" title="CVE-2024-42472"/>
      <reference href="https://bugzilla.redhat.com/2305202" id="2305202" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6356.html" id="ALSA-2024:6356" type="self" title="ALSA-2024:6356"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="flatpak-devel" version="1.12.9" release="3.el9_4" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el9_4.src.rpm">
          <filename>flatpak-devel-1.12.9-3.el9_4.s390x.rpm</filename>
          <sum type="sha256">de78ab298f6f8bac40874e1cc8e7ac8b867105e881f0baeafb5c118a646e11c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6464</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2024-09-09 00:00:00"/>
    <updated date="2024-09-10 06:20:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib2: Signal subscription vulnerabilities (CVE-2024-34397)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6464" id="RHSA-2024:6464" type="rhsa" title="RHSA-2024:6464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34397" id="CVE-2024-34397" type="cve" title="CVE-2024-34397"/>
      <reference href="https://bugzilla.redhat.com/2279632" id="2279632" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6464.html" id="ALSA-2024:6464" type="self" title="ALSA-2024:6464"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="glib2-static" version="2.68.4" release="14.el9_4.1" epoch="0" arch="s390x" src="glib2-2.68.4-14.el9_4.1.src.rpm">
          <filename>glib2-static-2.68.4-14.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">206170d6dd9dcb4eb5f152da4c42a8a12a20c5ce9e7a6353f4645a2529bc3c24</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6529</id>
    <title>Moderate: dovecot security update</title>
    <issued date="2024-09-10 00:00:00"/>
    <updated date="2024-09-11 09:48:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: using a large number of address headers may trigger a denial of service (CVE-2024-23184)
* dovecot: very large headers can cause resource exhaustion when parsing message (CVE-2024-23185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6529" id="RHSA-2024:6529" type="rhsa" title="RHSA-2024:6529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23184" id="CVE-2024-23184" type="cve" title="CVE-2024-23184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23185" id="CVE-2024-23185" type="cve" title="CVE-2024-23185"/>
      <reference href="https://bugzilla.redhat.com/2305909" id="2305909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2305910" id="2305910" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6529.html" id="ALSA-2024:6529" type="self" title="ALSA-2024:6529"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="dovecot-devel" version="2.3.16" release="11.el9_4.1" epoch="1" arch="s390x" src="dovecot-2.3.16-11.el9_4.1.src.rpm">
          <filename>dovecot-devel-2.3.16-11.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">6fba7c12a902532f5116b61b3f905de2bbf7701b8041631129af2f1d26ed7c62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6567</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-09-11 00:00:00"/>
    <updated date="2024-11-03 22:31:42"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
  * kernel: nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629)
  * kernel: mm: cachestat: fix folio read-after-free in cache walk (CVE-2024-26630)
  * kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-26720)
  * kernel: Bluetooth: af_bluetooth: Fix deadlock (CVE-2024-26886)
  * kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (CVE-2024-26946)
  * kernel: KVM: SVM: Flush pages under kvm-&amp;gt;lock to fix UAF in svm_register_enc_region() (CVE-2024-35791)
  * kernel: mm: cachestat: fix two shmem bugs (CVE-2024-35797)
  * kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems (CVE-2024-35875)
  * kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
  * kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area (CVE-2023-52801)
  * kernel: net: fix out-of-bounds access in ops_init (CVE-2024-36883)
  * kernel: regmap: maple: Fix cache corruption in regcache_maple_drop() (CVE-2024-36019)
  * kernel: usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619)
  * kernel: net: bridge: mst: fix vlan use-after-free (CVE-2024-36979)
  * kernel: scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559)
  * kernel: xhci: Handle TD clearing for multiple streams case (CVE-2024-40927)
  * kernel: cxl/region: Fix memregion leaks in devm_cxl_add_region() (CVE-2024-40936)
  * kernel: net/sched: Fix UAF when resolving a clash (CVE-2024-41040)
  * kernel: ppp: reject claimed-as-LCP but actually malformed packets (CVE-2024-41044)
  * kernel: mm: prevent derefencing NULL ptr in pfn_section_valid() (CVE-2024-41055)
  * kernel: PCI/MSI: Fix UAF in msi_capability_init (CVE-2024-41096)
  * kernel: xdp: Remove WARN() from __xdp_reg_mem_model() (CVE-2024-42082)
  * kernel: x86: stop playing stack games in profile_pc() (CVE-2024-42096)
  * kernel: Revert &amp;#34;mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again&amp;#34; (CVE-2024-42102)
  * kernel: mm: avoid overflows in dirty throttling logic (CVE-2024-42131)
  * kernel: nvme: avoid double free special payload (CVE-2024-41073)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6567" id="RHSA-2024:6567" type="rhsa" title="RHSA-2024:6567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52463" id="CVE-2023-52463" type="cve" title="CVE-2023-52463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52801" id="CVE-2023-52801" type="cve" title="CVE-2023-52801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26629" id="CVE-2024-26629" type="cve" title="CVE-2024-26629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26630" id="CVE-2024-26630" type="cve" title="CVE-2024-26630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26720" id="CVE-2024-26720" type="cve" title="CVE-2024-26720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26886" id="CVE-2024-26886" type="cve" title="CVE-2024-26886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26946" id="CVE-2024-26946" type="cve" title="CVE-2024-26946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35791" id="CVE-2024-35791" type="cve" title="CVE-2024-35791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35797" id="CVE-2024-35797" type="cve" title="CVE-2024-35797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35875" id="CVE-2024-35875" type="cve" title="CVE-2024-35875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36000" id="CVE-2024-36000" type="cve" title="CVE-2024-36000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36019" id="CVE-2024-36019" type="cve" title="CVE-2024-36019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36883" id="CVE-2024-36883" type="cve" title="CVE-2024-36883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36979" id="CVE-2024-36979" type="cve" title="CVE-2024-36979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38559" id="CVE-2024-38559" type="cve" title="CVE-2024-38559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38619" id="CVE-2024-38619" type="cve" title="CVE-2024-38619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40927" id="CVE-2024-40927" type="cve" title="CVE-2024-40927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40936" id="CVE-2024-40936" type="cve" title="CVE-2024-40936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41040" id="CVE-2024-41040" type="cve" title="CVE-2024-41040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41044" id="CVE-2024-41044" type="cve" title="CVE-2024-41044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41055" id="CVE-2024-41055" type="cve" title="CVE-2024-41055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41073" id="CVE-2024-41073" type="cve" title="CVE-2024-41073"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41096" id="CVE-2024-41096" type="cve" title="CVE-2024-41096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42082" id="CVE-2024-42082" type="cve" title="CVE-2024-42082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42096" id="CVE-2024-42096" type="cve" title="CVE-2024-42096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42102" id="CVE-2024-42102" type="cve" title="CVE-2024-42102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42131" id="CVE-2024-42131" type="cve" title="CVE-2024-42131"/>
      <reference href="https://bugzilla.redhat.com/2265797" id="2265797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269434" id="2269434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269436" id="2269436" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273141" id="2273141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275678" id="2275678" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278206" id="2278206" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281052" id="2281052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281151" id="2281151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281727" id="2281727" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281968" id="2281968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282709" id="2282709" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284271" id="2284271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284402" id="2284402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293273" id="2293273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293276" id="2293276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293440" id="2293440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297511" id="2297511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297520" id="2297520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300409" id="2300409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300414" id="2300414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300429" id="2300429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300491" id="2300491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300520" id="2300520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300713" id="2300713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301465" id="2301465" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301496" id="2301496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301637" id="2301637" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6567.html" id="ALSA-2024:6567" type="self" title="ALSA-2024:6567"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">28432c673b48ecebe1137a72b276fa8eae6a8f79b6002def889b9e3b2ee2b91e</sum>
        </package>
        <package name="libperf" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.35.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">4b042db0abed48fb06b932d982aecc5aa18300bbe6ac91eca968a8c1cc102c86</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6757</id>
    <title>Moderate: libnbd security update</title>
    <issued date="2024-09-18 00:00:00"/>
    <updated date="2024-09-20 13:13:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libnbd security update</summary>
    <description>Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.

Security Fix(es):

* libnbd: NBD server improper certificate validation (CVE-2024-7383)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6757" id="RHSA-2024:6757" type="rhsa" title="RHSA-2024:6757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7383" id="CVE-2024-7383" type="cve" title="CVE-2024-7383"/>
      <reference href="https://bugzilla.redhat.com/2302865" id="2302865" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6757.html" id="ALSA-2024:6757" type="self" title="ALSA-2024:6757"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libnbd-devel" version="1.18.1" release="4.el9_4" epoch="0" arch="s390x" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>libnbd-devel-1.18.1-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">15cb96647b33f28232aed07a8fd75ce23fffc8b6ead18abfe450ed6d01dc5939</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.18.1" release="4.el9_4" epoch="0" arch="s390x" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>ocaml-libnbd-devel-1.18.1-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">c8e5af630554d99f397212928a9ab3276af233f024bb607c8f462b4ffe791a54</sum>
        </package>
        <package name="ocaml-libnbd" version="1.18.1" release="4.el9_4" epoch="0" arch="s390x" src="libnbd-1.18.1-4.el9_4.src.rpm">
          <filename>ocaml-libnbd-1.18.1-4.el9_4.s390x.rpm</filename>
          <sum type="sha256">d496c61022b89d9189303dccfbdf415a1c6dcebbb93d1018dafd60eb1e521171</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6997</id>
    <title>Important: kernel security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-11-03 22:34:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
  * kernel: net/sched: act_mirred: don't override retval if we already lost the skb (CVE-2024-26739)
  * kernel: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CVE-2024-26947)
  * kernel: scsi: qla2xxx: Fix command flush on cable pull (CVE-2024-26931)
  * kernel: scsi: qla2xxx: Fix double free of the ha-&amp;gt;vp_map pointer (CVE-2024-26930)
  * kernel: scsi: qla2xxx: Fix double free of fcport (CVE-2024-26929)
  * kernel: fork: defer linking file vma until vma is fully initialized (CVE-2024-27022)
  * kernel: KVM: x86/mmu: x86: Don&amp;#39;t overflow lpage_info when checking attributes (CVE-2024-26991)
  * kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem (CVE-2024-35895)
  * kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016)
  * kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)
  * kernel: cpufreq: exit() callback is optional (CVE-2024-38615)
  * kernel: ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601)
  * kernel: cppc_cpufreq: Fix possible null pointer dereference (CVE-2024-38573)
  * kernel: gfs2: Fix potential glock use-after-free on unmount (CVE-2024-38570)
  * kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing (CVE-2024-38562)
  * kernel: Input: cyapa - add missing input core locking to suspend/resume functions (CVE-2023-52884)
  * kernel: ACPICA: Revert &amp;#34;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&amp;#34; (CVE-2024-40984)
  * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071)
  * kernel: wifi: mt76: replace skb_put with skb_put_zero (CVE-2024-42225)
  * kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CVE-2024-42246)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6997" id="RHSA-2024:6997" type="rhsa" title="RHSA-2024:6997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52439" id="CVE-2023-52439" type="cve" title="CVE-2023-52439"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52884" id="CVE-2023-52884" type="cve" title="CVE-2023-52884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26739" id="CVE-2024-26739" type="cve" title="CVE-2024-26739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26929" id="CVE-2024-26929" type="cve" title="CVE-2024-26929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26930" id="CVE-2024-26930" type="cve" title="CVE-2024-26930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26931" id="CVE-2024-26931" type="cve" title="CVE-2024-26931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26947" id="CVE-2024-26947" type="cve" title="CVE-2024-26947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26991" id="CVE-2024-26991" type="cve" title="CVE-2024-26991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27022" id="CVE-2024-27022" type="cve" title="CVE-2024-27022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35895" id="CVE-2024-35895" type="cve" title="CVE-2024-35895"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36016" id="CVE-2024-36016" type="cve" title="CVE-2024-36016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36899" id="CVE-2024-36899" type="cve" title="CVE-2024-36899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38562" id="CVE-2024-38562" type="cve" title="CVE-2024-38562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38570" id="CVE-2024-38570" type="cve" title="CVE-2024-38570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38573" id="CVE-2024-38573" type="cve" title="CVE-2024-38573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38601" id="CVE-2024-38601" type="cve" title="CVE-2024-38601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38615" id="CVE-2024-38615" type="cve" title="CVE-2024-38615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40984" id="CVE-2024-40984" type="cve" title="CVE-2024-40984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41071" id="CVE-2024-41071" type="cve" title="CVE-2024-41071"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42225" id="CVE-2024-42225" type="cve" title="CVE-2024-42225"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42246" id="CVE-2024-42246" type="cve" title="CVE-2024-42246"/>
      <reference href="https://bugzilla.redhat.com/2265271" id="2265271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273270" id="2273270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278167" id="2278167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278245" id="2278245" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278248" id="2278248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278250" id="2278250" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278252" id="2278252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278318" id="2278318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281677" id="2281677" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283894" id="2283894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284549" id="2284549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293348" id="2293348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293364" id="2293364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293420" id="2293420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293423" id="2293423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293431" id="2293431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293685" id="2293685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297568" id="2297568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300448" id="2300448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301543" id="2301543" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6997.html" id="ALSA-2024:6997" type="self" title="ALSA-2024:6997"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">0e38dc943f66a13185d2d0e86e0124ac3cb2b25404de4ed89929325c1ce927a6</sum>
        </package>
        <package name="libperf" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.37.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5a0083bc5be5c555f5990bc586c6263e68dd4743c820d6af8abc60b3cd28d09c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7346</id>
    <title>Important: cups-filters security update</title>
    <issued date="2024-09-27 00:00:00"/>
    <updated date="2024-09-28 10:34:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()
* cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes (CVE-2024-47076)
* cups: libppd: remote command injection via attacker controlled data in PPD file ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7346" id="RHSA-2024:7346" type="rhsa" title="RHSA-2024:7346"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47076" id="CVE-2024-47076" type="cve" title="CVE-2024-47076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47175" id="CVE-2024-47175" type="cve" title="CVE-2024-47175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47176" id="CVE-2024-47176" type="cve" title="CVE-2024-47176"/>
      <reference href="https://bugzilla.redhat.com/2314252" id="2314252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314253" id="2314253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314256" id="2314256" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7346.html" id="ALSA-2024:7346" type="self" title="ALSA-2024:7346"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="cups-filters-devel" version="1.28.7" release="17.el9_4" epoch="0" arch="s390x" src="cups-filters-1.28.7-17.el9_4.src.rpm">
          <filename>cups-filters-devel-1.28.7-17.el9_4.s390x.rpm</filename>
          <sum type="sha256">4e5792788e56dccaf1358c931e8c1d4b1582c5eb30ffad8528567216f7473b67</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7867</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-11 07:48:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.135 and .NET Runtime 6.0.35.

Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7867" id="RHSA-2024:7867" type="rhsa" title="RHSA-2024:7867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7867.html" id="ALSA-2024:7867" type="self" title="ALSA-2024:7867"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.135" release="1.el9_4" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el9_4.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.135-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">5b3d39438609cbee9ee900deae681b6968635ae755194b045046ad3075f51705</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7869</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-11 07:46:21"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.110 and .NET Runtime 8.0.10.

Security Fix(es):

* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7869" id="RHSA-2024:7869" type="rhsa" title="RHSA-2024:7869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38229" id="CVE-2024-38229" type="cve" title="CVE-2024-38229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2316161" id="2316161" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-7869.html" id="ALSA-2024:7869" type="self" title="ALSA-2024:7869"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.110" release="1.el9_4" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el9_4.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.110-1.el9_4.s390x.rpm</filename>
          <sum type="sha256">3b46039dcae9f02ab563bbda59287085ffe2e5bbc840eeec30c03d1f4227e178</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8037</id>
    <title>Moderate: OpenIPMI security update</title>
    <issued date="2024-10-14 00:00:00"/>
    <updated date="2024-10-15 09:16:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>OpenIPMI security update</summary>
    <description>The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface (IPMI). System administrators can use OpenIPMI to manage systems and to perform system health monitoring.

Security Fix(es):

* openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator (CVE-2024-42934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8037" id="RHSA-2024:8037" type="rhsa" title="RHSA-2024:8037"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42934" id="CVE-2024-42934" type="cve" title="CVE-2024-42934"/>
      <reference href="https://bugzilla.redhat.com/2308375" id="2308375" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8037.html" id="ALSA-2024:8037" type="self" title="ALSA-2024:8037"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="OpenIPMI-devel" version="2.0.32" release="5.el9_4" epoch="0" arch="s390x" src="OpenIPMI-2.0.32-5.el9_4.src.rpm">
          <filename>OpenIPMI-devel-2.0.32-5.el9_4.s390x.rpm</filename>
          <sum type="sha256">757d5a5688a12fe873c20369cfbb6d99f53a1f422cbcd6777ca988be215b5136</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8121</id>
    <title>Moderate: java-11-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:33:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8121" id="RHSA-2024:8121" type="rhsa" title="RHSA-2024:8121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8121.html" id="ALSA-2024:8121" type="self" title="ALSA-2024:8121"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">3ea2bcb72c22d1887c55bbe1524c2374dab83c3ee6f4dbb06a5481e08814617a</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">61238ec111914158006268d078ee9079b7410a292dcd9d6631767d18e055cdfb</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">617a20ca2d86c01c01b54c0d51154b8d7ad496815218ad8680c6b2f7ef4bd156</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">8d70fb968685e04e337b21943a42990ef15d30dad51aa5fd7a6bd439bbe2fe66</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">936739ecc51c9e711e65661f8d5b70107fdfdcae088a38041aa0ca009c2af5b4</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">a1b5f372a7ceffac7c1aed75bd95df0ea63d6b5113cd299c220277e5e4dccd72</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.25.0.9" release="2.el9" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el9.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.25.0.9-2.el9.s390x.rpm</filename>
          <sum type="sha256">dbd6bae8e37053a3e17a200d394633534be33b453a4a34b8282204a048a95681</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8124</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:29:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8124" id="RHSA-2024:8124" type="rhsa" title="RHSA-2024:8124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8124.html" id="ALSA-2024:8124" type="self" title="ALSA-2024:8124"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">08e27b480d3fdb8a7b29db83103e8d4b9776cff08ce3d3db0c2523776d02f948</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0ab32af9cbf4ac655c39f37c5240e34c47d8d21be05a392e3ec6cef5091fbd85</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">4023225da7dc61d829c46142a202d856eec48df9da4d2a6ce2fe4f7862b412e3</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">43fc27dd08127ca1ac843774e8f3a244f9ae3723608278cc8b74b5b4131d30ca</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">48d34042714f3687c900d816023e1f5aa75007476e77f6cf2e79fdae43965f85</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">4ec478cd996c0ce8ffd297310e65a65a4736fc971680421334c46023b3435087</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.13.0.11" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.13.0.11-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ec01152d95ef13e189487f38d799bdb1d1b039ecd36c827640fa33790a43d124</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8127</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:24:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 runtime environment.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8127" id="RHSA-2024:8127" type="rhsa" title="RHSA-2024:8127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8127.html" id="ALSA-2024:8127" type="self" title="ALSA-2024:8127"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="java-21-openjdk-slowdebug" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">21deac5fcc7a7935a8ab3e2043a117d84533ce1a56004b4be19a4bc9fcd04799</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">34621334bf49e6efc59d5b7df0659c2c4db2258ee68131d3bfa77253166fa1f0</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">47ab33c662e4a1fd37a5f2ba449c21b0d4ba88f70988db66fbd796202b96723e</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">65b5ed3f3548b6df70acfeade10c671a0fa4bb37f28eaf42635f92912e1b9279</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">7b8494fd2294d14f32215fc694edd79d9a8b15bd3c0dc47243ca17730289c904</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">9ea9f871fa123821e67b2c7392cb980f47a9b61cda7a7fe1b51acbc1afb2c6b8</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.5.0.10" release="3.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.5.0.10-3.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">cd58a30c5141423d22c656d15c7a563f207c6c04f9fbda03ef72eefe11b1a149</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8162</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-25 06:30:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)
  * kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403)
  * kernel: Revert &amp;#34;net/mlx5: Block entering switchdev mode with ns inconsistency&amp;#34; (CVE-2023-52658)
  * kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CVE-2024-35989)
  * kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (CVE-2021-47385)
  * kernel: mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889)
  * kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978)
  * kernel: net/mlx5: Add a timeout to acquire the command queue semaphore (CVE-2024-38556)
  * kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CVE-2024-39483)
  * kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502)
  * kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CVE-2024-40959)
  * kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush (CVE-2024-42079)
  * kernel: sched: act_ct: take care of padding in struct zones_ht_key (CVE-2024-42272)
  * kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error (CVE-2024-42284)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8162" id="RHSA-2024:8162" type="rhsa" title="RHSA-2024:8162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47385" id="CVE-2021-47385" type="cve" title="CVE-2021-47385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28746" id="CVE-2023-28746" type="cve" title="CVE-2023-28746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52658" id="CVE-2023-52658" type="cve" title="CVE-2023-52658"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27403" id="CVE-2024-27403" type="cve" title="CVE-2024-27403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35989" id="CVE-2024-35989" type="cve" title="CVE-2024-35989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36889" id="CVE-2024-36889" type="cve" title="CVE-2024-36889"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36978" id="CVE-2024-36978" type="cve" title="CVE-2024-36978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38556" id="CVE-2024-38556" type="cve" title="CVE-2024-38556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39483" id="CVE-2024-39483" type="cve" title="CVE-2024-39483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39502" id="CVE-2024-39502" type="cve" title="CVE-2024-39502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40959" id="CVE-2024-40959" type="cve" title="CVE-2024-40959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42079" id="CVE-2024-42079" type="cve" title="CVE-2024-42079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42272" id="CVE-2024-42272" type="cve" title="CVE-2024-42272"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42284" id="CVE-2024-42284" type="cve" title="CVE-2024-42284"/>
      <reference href="https://bugzilla.redhat.com/2270700" id="2270700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281127" id="2281127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281149" id="2281149" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281847" id="2281847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282355" id="2282355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284571" id="2284571" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293078" id="2293078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293443" id="2293443" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295921" id="2295921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297474" id="2297474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297543" id="2297543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300517" id="2300517" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8162.html" id="ALSA-2024:8162" type="self" title="ALSA-2024:8162"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libperf" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">3c70aa06ad6248fdd59121f87fc70ee11fe5a0eb6fa8ff76874bfca62b27f490</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.40.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">8b17c8ac109f5b2b6bf354aabb7d96d0c1cfb2b29395af80df245b89b87b0b12</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8374</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-10-23 00:00:00"/>
    <updated date="2024-10-24 07:32:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8374" id="RHSA-2024:8374" type="rhsa" title="RHSA-2024:8374"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8374.html" id="ALSA-2024:8374" type="self" title="ALSA-2024:8374"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.11-debug" version="3.11.7" release="1.el9_4.6" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.6.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">22bee12d76867a589c7824ab66923f952046ed85befe5af59291c0745350e192</sum>
        </package>
        <package name="python3.11-test" version="3.11.7" release="1.el9_4.6" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.6.src.rpm">
          <filename>python3.11-test-3.11.7-1.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">770ac9e78f8340e07c37090df2f9db9d4a71ad3e264aaf92a317a3e43b555df5</sum>
        </package>
        <package name="python3.11-idle" version="3.11.7" release="1.el9_4.6" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el9_4.6.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">aed55e27432aad43ffe95def344bae22f8f69bdbe871b8329f2576d6e0f56dc6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8446</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-10-24 00:00:00"/>
    <updated date="2024-10-24 22:22:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8446" id="RHSA-2024:8446" type="rhsa" title="RHSA-2024:8446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8446.html" id="ALSA-2024:8446" type="self" title="ALSA-2024:8446"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3-idle" version="3.9.18" release="3.el9_4.6" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.6.src.rpm">
          <filename>python3-idle-3.9.18-3.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">b2dea5b3669fe7bb4e2828f25e414c8451adf8241e655679889d6ee74ddcefa4</sum>
        </package>
        <package name="python3-debug" version="3.9.18" release="3.el9_4.6" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.6.src.rpm">
          <filename>python3-debug-3.9.18-3.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">dcccba2fc8fc2cfd62afe0a35f0da510a1c35ed45b9bbc6ae31e7652f72b8c7f</sum>
        </package>
        <package name="python3-test" version="3.9.18" release="3.el9_4.6" epoch="0" arch="s390x" src="python3.9-3.9.18-3.el9_4.6.src.rpm">
          <filename>python3-test-3.9.18-3.el9_4.6.s390x.rpm</filename>
          <sum type="sha256">dd331f57e41cfa14aa4c059dfdf76d2db9c477398b303840815a3d525d08a8e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8447</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-10-24 00:00:00"/>
    <updated date="2024-10-24 22:24:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8447" id="RHSA-2024:8447" type="rhsa" title="RHSA-2024:8447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8447.html" id="ALSA-2024:8447" type="self" title="ALSA-2024:8447"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.12-idle" version="3.12.1" release="4.el9_4.4" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.4.src.rpm">
          <filename>python3.12-idle-3.12.1-4.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">1aaa933886745123ce6aa63fcc6ee6dde7bf76a1d3d4f1d70ade4891e1d04678</sum>
        </package>
        <package name="python3.12-test" version="3.12.1" release="4.el9_4.4" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.4.src.rpm">
          <filename>python3.12-test-3.12.1-4.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">7e8213eaa767c6d15b0f26cc7e153979dc0f6718c502c0400136e1640ff111a5</sum>
        </package>
        <package name="python3.12-debug" version="3.12.1" release="4.el9_4.4" epoch="0" arch="s390x" src="python3.12-3.12.1-4.el9_4.4.src.rpm">
          <filename>python3.12-debug-3.12.1-4.el9_4.4.s390x.rpm</filename>
          <sum type="sha256">eccbfeee396946651105127a029f38edf34e0779454f727195f684fba1f977b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8617</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-10-30 00:00:00"/>
    <updated date="2024-11-03 19:17:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201)
  * kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
  * kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
  * kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923)
  * kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961)
  * kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935)
  * kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383)
  * kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244)
  * kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472)
  * kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504)
  * kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904)
  * kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931)
  * kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960)
  * kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972)
  * kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977)
  * kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995)
  * kernel: ext4: fix uninitialized ratelimit_state-&amp;gt;lock access in __ext4_fill_super() (CVE-2024-40998)
  * kernel: netpoll: Fix race condition in netpoll_owner_active (CVE-2024-41005)
  * kernel: xfs: don&amp;#39;t walk off the end of a directory data block (CVE-2024-41013)
  * kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014)
  * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)
  * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8617" id="RHSA-2024:8617" type="rhsa" title="RHSA-2024:8617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47383" id="CVE-2021-47383" type="cve" title="CVE-2021-47383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2201" id="CVE-2024-2201" type="cve" title="CVE-2024-2201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26640" id="CVE-2024-26640" type="cve" title="CVE-2024-26640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26826" id="CVE-2024-26826" type="cve" title="CVE-2024-26826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26923" id="CVE-2024-26923" type="cve" title="CVE-2024-26923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26935" id="CVE-2024-26935" type="cve" title="CVE-2024-26935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26961" id="CVE-2024-26961" type="cve" title="CVE-2024-26961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36244" id="CVE-2024-36244" type="cve" title="CVE-2024-36244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39472" id="CVE-2024-39472" type="cve" title="CVE-2024-39472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39504" id="CVE-2024-39504" type="cve" title="CVE-2024-39504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40904" id="CVE-2024-40904" type="cve" title="CVE-2024-40904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40931" id="CVE-2024-40931" type="cve" title="CVE-2024-40931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40960" id="CVE-2024-40960" type="cve" title="CVE-2024-40960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40972" id="CVE-2024-40972" type="cve" title="CVE-2024-40972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40977" id="CVE-2024-40977" type="cve" title="CVE-2024-40977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40995" id="CVE-2024-40995" type="cve" title="CVE-2024-40995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40998" id="CVE-2024-40998" type="cve" title="CVE-2024-40998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41005" id="CVE-2024-41005" type="cve" title="CVE-2024-41005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41013" id="CVE-2024-41013" type="cve" title="CVE-2024-41013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41014" id="CVE-2024-41014" type="cve" title="CVE-2024-41014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43854" id="CVE-2024-43854" type="cve" title="CVE-2024-43854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45018" id="CVE-2024-45018" type="cve" title="CVE-2024-45018"/>
      <reference href="https://bugzilla.redhat.com/2268118" id="2268118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270100" id="2270100" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275604" id="2275604" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277171" id="2277171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278176" id="2278176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278235" id="2278235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282357" id="2282357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293654" id="2293654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296067" id="2296067" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297476" id="2297476" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297488" id="2297488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297515" id="2297515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297544" id="2297544" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297556" id="2297556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297561" id="2297561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297579" id="2297579" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297582" id="2297582" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297589" id="2297589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300296" id="2300296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300297" id="2300297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311715" id="2311715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8617.html" id="ALSA-2024:8617" type="self" title="ALSA-2024:8617"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libperf" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>libperf-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">3a786c4e9aa00cb70f66ea11ccc7d76ebae950d6ef42084641fbbf07e37609de</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="s390x" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-cross-headers-5.14.0-427.42.1.el9_4.s390x.rpm</filename>
          <sum type="sha256">909d28c769bc52d55991658d8aebda21e66d77af304a0c2ee7ed7d70e7b979b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8800</id>
    <title>Important: openexr security update</title>
    <issued date="2024-11-04 00:00:00"/>
    <updated date="2024-11-04 23:04:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openexr security update</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  

Security Fix(es):  

  * OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8800" id="RHSA-2024:8800" type="rhsa" title="RHSA-2024:8800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5841" id="CVE-2023-5841" type="cve" title="CVE-2023-5841"/>
      <reference href="https://bugzilla.redhat.com/2262397" id="2262397" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8800.html" id="ALSA-2024:8800" type="self" title="ALSA-2024:8800"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="openexr-devel" version="3.1.1" release="2.el9_4.1" epoch="0" arch="s390x" src="openexr-3.1.1-2.el9_4.1.src.rpm">
          <filename>openexr-devel-3.1.1-2.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">60f71126eedcadbc59f0b48720f4683f7b9750a023e22700673de8baf69deb5d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8914</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-05 22:28:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: NULL pointer dereference in tif_dirinfo.c (CVE-2024-7006)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8914" id="RHSA-2024:8914" type="rhsa" title="RHSA-2024:8914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7006" id="CVE-2024-7006" type="cve" title="CVE-2024-7006"/>
      <reference href="https://bugzilla.redhat.com/2302996" id="2302996" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8914.html" id="ALSA-2024:8914" type="self" title="ALSA-2024:8914"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libtiff-tools" version="4.4.0" release="12.el9_4.1" epoch="0" arch="s390x" src="libtiff-4.4.0-12.el9_4.1.src.rpm">
          <filename>libtiff-tools-4.4.0-12.el9_4.1.s390x.rpm</filename>
          <sum type="sha256">b4bb2f5e0699d723e0ac8ba0609ee7445d30fe8246845693af0ac53b9b3f33f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8935</id>
    <title>Moderate: edk2 security update</title>
    <issued date="2024-11-06 00:00:00"/>
    <updated date="2024-11-08 09:03:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.   

Security Fix(es):  

  * openssl: Possible denial of service in X.509 name checks (CVE-2024-6119)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8935" id="RHSA-2024:8935" type="rhsa" title="RHSA-2024:8935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6119" id="CVE-2024-6119" type="cve" title="CVE-2024-6119"/>
      <reference href="https://bugzilla.redhat.com/2306158" id="2306158" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8935.html" id="ALSA-2024:8935" type="self" title="ALSA-2024:8935"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="edk2-aarch64" version="20231122" release="6.el9_4.4" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.4.src.rpm">
          <filename>edk2-aarch64-20231122-6.el9_4.4.noarch.rpm</filename>
          <sum type="sha256">6ead2d3429f2753faeac142fafcbdb556ed7e654686566cc8c3c51d6d0443a73</sum>
        </package>
        <package name="edk2-tools-doc" version="20231122" release="6.el9_4.4" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.4.src.rpm">
          <filename>edk2-tools-doc-20231122-6.el9_4.4.noarch.rpm</filename>
          <sum type="sha256">ba46cd872396c59af904379ce10005c4a600251e4545cdf711095752271afbd0</sum>
        </package>
        <package name="edk2-ovmf" version="20231122" release="6.el9_4.4" epoch="0" arch="noarch" src="edk2-20231122-6.el9_4.4.src.rpm">
          <filename>edk2-ovmf-20231122-6.el9_4.4.noarch.rpm</filename>
          <sum type="sha256">f240e4196ec775d8927b7347b3954c802adec030b855c4acc8bda3228f24530f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9093</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
  * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
  * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9093" id="RHSA-2024:9093" type="rhsa" title="RHSA-2024:9093"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083"/>
      <reference href="https://bugzilla.redhat.com/2271997" id="2271997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271998" id="2271998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272000" id="2272000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9093.html" id="ALSA-2024:9093" type="self" title="ALSA-2024:9093"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="xorg-x11-server-Xwayland-devel" version="23.2.7" release="1.el9" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-23.2.7-1.el9.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-23.2.7-1.el9.s390x.rpm</filename>
          <sum type="sha256">d5e6c9aef66edbffc6049aac2412bf11efccfa31e52af7455ffe7fca5c4f13f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9122</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:49:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
  * xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
  * xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9122" id="RHSA-2024:9122" type="rhsa" title="RHSA-2024:9122"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083"/>
      <reference href="https://bugzilla.redhat.com/2271997" id="2271997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271998" id="2271998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272000" id="2272000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9122.html" id="ALSA-2024:9122" type="self" title="ALSA-2024:9122"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="26.el9" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-26.el9.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-26.el9.noarch.rpm</filename>
          <sum type="sha256">04014f59feac5b00a0590cbb6cacb7c373f1b5fc9e24cb3e7ba498b0e97163f9</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="26.el9" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el9.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-26.el9.s390x.rpm</filename>
          <sum type="sha256">f6ef287282cde791a90e7131286804b34e6ccc7869d8cf93c1ec210255ddd8f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9128</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.  

Security Fix(es):  

  * libvirt: Crash of virtinterfaced via virConnectListInterfaces() (CVE-2024-8235)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9128" id="RHSA-2024:9128" type="rhsa" title="RHSA-2024:9128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8235" id="CVE-2024-8235" type="cve" title="CVE-2024-8235"/>
      <reference href="https://bugzilla.redhat.com/2308680" id="2308680" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9128.html" id="ALSA-2024:9128" type="self" title="ALSA-2024:9128"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libvirt-daemon-plugin-sanlock" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">213329d239487fa0c3c8862c24684fc6087ae544a6424a0c6679a19dbc84dc75</sum>
        </package>
        <package name="libvirt-docs" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-docs-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">3c0fe4a3dc2ba32e91d16acc9beb5ac2551ec078f85d5bc674273b2fb693abd9</sum>
        </package>
        <package name="libvirt-devel" version="10.5.0" release="7.el9_5.alma.1" epoch="0" arch="s390x" src="libvirt-10.5.0-7.el9_5.alma.1.src.rpm">
          <filename>libvirt-devel-10.5.0-7.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">c303d51f53e2613a781071ccd7f73dc1662df9b7f26785284e19149b0b10738d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9167</id>
    <title>Moderate: poppler security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:52:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: pdfinfo: crash in broken documents when using -dests parameter (CVE-2024-6239)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9167" id="RHSA-2024:9167" type="rhsa" title="RHSA-2024:9167"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6239" id="CVE-2024-6239" type="cve" title="CVE-2024-6239"/>
      <reference href="https://bugzilla.redhat.com/2293594" id="2293594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9167.html" id="ALSA-2024:9167" type="self" title="ALSA-2024:9167"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="poppler-glib-devel" version="21.01.0" release="21.el9" epoch="0" arch="s390x" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-glib-devel-21.01.0-21.el9.s390x.rpm</filename>
          <sum type="sha256">3936f44ba460ca9bc8ccaaea504b86ed5830b4e35fc9726271a52716f7c4323c</sum>
        </package>
        <package name="poppler-devel" version="21.01.0" release="21.el9" epoch="0" arch="s390x" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-devel-21.01.0-21.el9.s390x.rpm</filename>
          <sum type="sha256">44818f034a0fc067683b6e00437725c14f54ad76f0be2defaa15378a22c9b5d2</sum>
        </package>
        <package name="poppler-glib-doc" version="21.01.0" release="21.el9" epoch="0" arch="noarch" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-glib-doc-21.01.0-21.el9.noarch.rpm</filename>
          <sum type="sha256">a61fb4d179262e8f7b527744c120382860ebb8da6f1f7d37d23fde01e3e82987</sum>
        </package>
        <package name="poppler-qt5-devel" version="21.01.0" release="21.el9" epoch="0" arch="s390x" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-21.el9.s390x.rpm</filename>
          <sum type="sha256">a93bfb15d1dd08f2e44ddcc52fea6c2737b9b5814f2a4cf85d8333606bcc1fad</sum>
        </package>
        <package name="poppler-cpp-devel" version="21.01.0" release="21.el9" epoch="0" arch="s390x" src="poppler-21.01.0-21.el9.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-21.el9.s390x.rpm</filename>
          <sum type="sha256">b9b257d6a839942831fa99e798684e5fb1b073ac782730efd69c61d7b7eb675a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9181</id>
    <title>Moderate: jose security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>jose security update</summary>
    <description>Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose package is a dependency of the clevis and tang packages, together providing Network Bound Disk Encryption (NBDE) in AlmaLinux.  

Security Fix(es):  

  * jose: resource exhaustion (CVE-2024-28176)
  * jose: Denial of service due to uncontrolled CPU consumption (CVE-2023-50967)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9181" id="RHSA-2024:9181" type="rhsa" title="RHSA-2024:9181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50967" id="CVE-2023-50967" type="cve" title="CVE-2023-50967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28176" id="CVE-2024-28176" type="cve" title="CVE-2024-28176"/>
      <reference href="https://bugzilla.redhat.com/2268820" id="2268820" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270538" id="2270538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9181.html" id="ALSA-2024:9181" type="self" title="ALSA-2024:9181"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libjose-devel" version="14" release="1.el9" epoch="0" arch="s390x" src="jose-14-1.el9.src.rpm">
          <filename>libjose-devel-14-1.el9.s390x.rpm</filename>
          <sum type="sha256">5dc81a134979aaf9d863b9eff5c7ded16a4b216c05d95e3aea5a8acb2355b675</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9184</id>
    <title>Moderate: gtk3 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gtk3 security update</summary>
    <description>The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3.  

Security Fix(es):  

  * gtk3: gtk2: Library injection from CWD (CVE-2024-6655)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9184" id="RHSA-2024:9184" type="rhsa" title="RHSA-2024:9184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6655" id="CVE-2024-6655" type="cve" title="CVE-2024-6655"/>
      <reference href="https://bugzilla.redhat.com/2297098" id="2297098" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9184.html" id="ALSA-2024:9184" type="self" title="ALSA-2024:9184"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="gtk3-devel-docs" version="3.24.31" release="5.el9" epoch="0" arch="s390x" src="gtk3-3.24.31-5.el9.src.rpm">
          <filename>gtk3-devel-docs-3.24.31-5.el9.s390x.rpm</filename>
          <sum type="sha256">8fbd65d8d737b838fcc77f9f803b60c8ce07517dccf17cd4f7530c13c54212d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9187</id>
    <title>Low: bcc security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:49:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>bcc security update</summary>
    <description>BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool.  

Security Fix(es):  

  * bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9187" id="RHSA-2024:9187" type="rhsa" title="RHSA-2024:9187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2314" id="CVE-2024-2314" type="cve" title="CVE-2024-2314"/>
      <reference href="https://bugzilla.redhat.com/2269019" id="2269019" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9187.html" id="ALSA-2024:9187" type="self" title="ALSA-2024:9187"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="bcc-devel" version="0.30.0" release="6.el9" epoch="0" arch="s390x" src="bcc-0.30.0-6.el9.src.rpm">
          <filename>bcc-devel-0.30.0-6.el9.s390x.rpm</filename>
          <sum type="sha256">3958b07bc3d68a84cd7a6853ccd9de99a27799a4729312738344f67c282a73c8</sum>
        </package>
        <package name="bcc-doc" version="0.30.0" release="6.el9" epoch="0" arch="noarch" src="bcc-0.30.0-6.el9.src.rpm">
          <filename>bcc-doc-0.30.0-6.el9.noarch.rpm</filename>
          <sum type="sha256">bfa0e15890e368fcde724436ef7855beb8037f5b9570b22facd5dbaf178346b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9190</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 18:13:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.  

Security Fix(es):  

  * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)
  * python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
  * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9190" id="RHSA-2024:9190" type="rhsa" title="RHSA-2024:9190"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9190.html" id="ALSA-2024:9190" type="self" title="ALSA-2024:9190"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.12-debug" version="3.12.5" release="2.el9" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9.src.rpm">
          <filename>python3.12-debug-3.12.5-2.el9.s390x.rpm</filename>
          <sum type="sha256">0e90638c1f03e02547321b305d1eaaf2e628c2320cc91d3996442406b2ae5fcd</sum>
        </package>
        <package name="python3.12-test" version="3.12.5" release="2.el9" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9.src.rpm">
          <filename>python3.12-test-3.12.5-2.el9.s390x.rpm</filename>
          <sum type="sha256">771e17bc4c37b1d61569eb903ec78d82da4407b9fbe6570c55370fedcce6f09b</sum>
        </package>
        <package name="python3.12-idle" version="3.12.5" release="2.el9" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9.src.rpm">
          <filename>python3.12-idle-3.12.5-2.el9.s390x.rpm</filename>
          <sum type="sha256">f1eb92f1931eab26535318cd7610485ad686a6b8f8fe6f99db3ebd9a8d67b72d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9192</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 18:11:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)
  * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9192" id="RHSA-2024:9192" type="rhsa" title="RHSA-2024:9192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9192.html" id="ALSA-2024:9192" type="self" title="ALSA-2024:9192"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.11-idle" version="3.11.9" release="7.el9" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9.src.rpm">
          <filename>python3.11-idle-3.11.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">339c2c37d72f70188d64a36b14e19f7cf4982ea9ed789a0e2a1e9dcde726bfc6</sum>
        </package>
        <package name="python3.11-debug" version="3.11.9" release="7.el9" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9.src.rpm">
          <filename>python3.11-debug-3.11.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">9543f2ec9560048c913edf16927c1d5e5ed68d033cf5b52d03694427a2a23946</sum>
        </package>
        <package name="python3.11-test" version="3.11.9" release="7.el9" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9.src.rpm">
          <filename>python3.11-test-3.11.9-7.el9.s390x.rpm</filename>
          <sum type="sha256">f13409388df2814a83e7c0e039f62858927389fe9667db75fbced6f91e8ecde7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9317</id>
    <title>Low: NetworkManager security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:46:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>NetworkManager security update</summary>
    <description>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.  

Security Fix(es):  

  * NetworkManager: Denial of Service (CVE-2024-6501)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9317" id="RHSA-2024:9317" type="rhsa" title="RHSA-2024:9317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6501" id="CVE-2024-6501" type="cve" title="CVE-2024-6501"/>
      <reference href="https://bugzilla.redhat.com/2295734" id="2295734" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9317.html" id="ALSA-2024:9317" type="self" title="ALSA-2024:9317"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="NetworkManager-libnm-devel" version="1.48.10" release="2.el9_5.alma.1" epoch="1" arch="s390x" src="NetworkManager-1.48.10-2.el9_5.alma.1.src.rpm">
          <filename>NetworkManager-libnm-devel-1.48.10-2.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">610382eda9eb7565631fcfc7f46ad716a0a712cfe31384f28756a5ec0b63cb73</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9371</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 14:09:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9371" id="RHSA-2024:9371" type="rhsa" title="RHSA-2024:9371"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9371.html" id="ALSA-2024:9371" type="self" title="ALSA-2024:9371"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3-idle" version="3.9.19" release="8.el9" epoch="0" arch="s390x" src="python3.9-3.9.19-8.el9.src.rpm">
          <filename>python3-idle-3.9.19-8.el9.s390x.rpm</filename>
          <sum type="sha256">2d4f95389dd7ccbdf7acf2c181f366ebd02fbb022ba0b2286e9d062ee105d805</sum>
        </package>
        <package name="python3-debug" version="3.9.19" release="8.el9" epoch="0" arch="s390x" src="python3.9-3.9.19-8.el9.src.rpm">
          <filename>python3-debug-3.9.19-8.el9.s390x.rpm</filename>
          <sum type="sha256">4f303e895bc06f7aac6e18e9583ab872fbc5ba55bd992b615e2171aeb65241d3</sum>
        </package>
        <package name="python3-test" version="3.9.19" release="8.el9" epoch="0" arch="s390x" src="python3.9-3.9.19-8.el9.src.rpm">
          <filename>python3-test-3.9.19-8.el9.s390x.rpm</filename>
          <sum type="sha256">63ce2797152ba59668a641545058ad2f36d15501bfd39fee448bb3a17d3a43f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9413</id>
    <title>Moderate: bluez security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bluez security update</summary>
    <description>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   

Security Fix(es):  

  * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)
  * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)
  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596)
  * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594)
  * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592)
  * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)
  * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580)
  * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431)
  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230)
  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9413" id="RHSA-2024:9413" type="rhsa" title="RHSA-2024:9413"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27349" id="CVE-2023-27349" type="cve" title="CVE-2023-27349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44431" id="CVE-2023-44431" type="cve" title="CVE-2023-44431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45866" id="CVE-2023-45866" type="cve" title="CVE-2023-45866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50229" id="CVE-2023-50229" type="cve" title="CVE-2023-50229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50230" id="CVE-2023-50230" type="cve" title="CVE-2023-50230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51580" id="CVE-2023-51580" type="cve" title="CVE-2023-51580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51589" id="CVE-2023-51589" type="cve" title="CVE-2023-51589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51592" id="CVE-2023-51592" type="cve" title="CVE-2023-51592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51594" id="CVE-2023-51594" type="cve" title="CVE-2023-51594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51596" id="CVE-2023-51596" type="cve" title="CVE-2023-51596"/>
      <reference href="https://bugzilla.redhat.com/2253391" id="2253391" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278787" id="2278787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278945" id="2278945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278955" id="2278955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278962" id="2278962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278965" id="2278965" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278967" id="2278967" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278969" id="2278969" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278972" id="2278972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278974" id="2278974" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9413.html" id="ALSA-2024:9413" type="self" title="ALSA-2024:9413"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="bluez-libs-devel" version="5.72" release="2.el9" epoch="0" arch="s390x" src="bluez-5.72-2.el9.src.rpm">
          <filename>bluez-libs-devel-5.72-2.el9.s390x.rpm</filename>
          <sum type="sha256">76ddbac006ca360de5c0aee9d3b32f358b2fe39c9e34c127f6639cb6bd6dc9d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9439</id>
    <title>Moderate: fontforge security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fontforge security update</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.   

Security Fix(es):  

  * fontforge: command injection via crafted archives or compressed files (CVE-2024-25082)
  * fontforge: command injection via crafted filenames (CVE-2024-25081)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9439" id="RHSA-2024:9439" type="rhsa" title="RHSA-2024:9439"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25081" id="CVE-2024-25081" type="cve" title="CVE-2024-25081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25082" id="CVE-2024-25082" type="cve" title="CVE-2024-25082"/>
      <reference href="https://bugzilla.redhat.com/2266180" id="2266180" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266181" id="2266181" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9439.html" id="ALSA-2024:9439" type="self" title="ALSA-2024:9439"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="fontforge" version="20201107" release="6.el9" epoch="0" arch="s390x" src="fontforge-20201107-6.el9.src.rpm">
          <filename>fontforge-20201107-6.el9.s390x.rpm</filename>
          <sum type="sha256">f282e4142f9e64540475d754ae3bed76845a102c5ab8e20dbf6b7044ba05e645</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9449</id>
    <title>Important: bubblewrap and flatpak security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:47:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bubblewrap and flatpak security update</summary>
    <description>Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.  

Security Fix(es):  

  * flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9449" id="RHSA-2024:9449" type="rhsa" title="RHSA-2024:9449"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42472" id="CVE-2024-42472" type="cve" title="CVE-2024-42472"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9449.html" id="ALSA-2024:9449" type="self" title="ALSA-2024:9449"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="flatpak-devel" version="1.12.9" release="3.el9_5" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el9_5.src.rpm">
          <filename>flatpak-devel-1.12.9-3.el9_5.s390x.rpm</filename>
          <sum type="sha256">9e985726a1f0d54568495fa4ec69f3f5f08a5517d2b30daba97a847081c18f77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9450</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:48:12"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9450" id="RHSA-2024:9450" type="rhsa" title="RHSA-2024:9450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9450.html" id="ALSA-2024:9450" type="self" title="ALSA-2024:9450"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.11-idle" version="3.11.9" release="7.el9_5.1" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.1.src.rpm">
          <filename>python3.11-idle-3.11.9-7.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">3197015bc351d05417368f1ed2dee9ea9dfe69f7aac7d9df33672ad4e1959f40</sum>
        </package>
        <package name="python3.11-debug" version="3.11.9" release="7.el9_5.1" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.1.src.rpm">
          <filename>python3.11-debug-3.11.9-7.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">ccb5cd2a906a03be6b03d0e705db90b00bcb72389111eb20887c0198ba1dcc25</sum>
        </package>
        <package name="python3.11-test" version="3.11.9" release="7.el9_5.1" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.1.src.rpm">
          <filename>python3.11-test-3.11.9-7.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">db132c84c937833b07e138af6c26b0c5cad8e8eddf6a55192edce4accf8a9453</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9451</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:48:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9451" id="RHSA-2024:9451" type="rhsa" title="RHSA-2024:9451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9451.html" id="ALSA-2024:9451" type="self" title="ALSA-2024:9451"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3.12-test" version="3.12.5" release="2.el9_5.1" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.1.src.rpm">
          <filename>python3.12-test-3.12.5-2.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">879d4da0fc6571c4d5e0b5d130756bec95f08167dd5694bf63f5157383d99fef</sum>
        </package>
        <package name="python3.12-debug" version="3.12.5" release="2.el9_5.1" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.1.src.rpm">
          <filename>python3.12-debug-3.12.5-2.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">924b0ed7f376d12f24798ee25aa09c3b5b228154372b663a1abd757319858d05</sum>
        </package>
        <package name="python3.12-idle" version="3.12.5" release="2.el9_5.1" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.1.src.rpm">
          <filename>python3.12-idle-3.12.5-2.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">e613eb312adba104131307d85ba1555871ed610bfabb185f8958708ffa34a0d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9468</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2024-11-12 00:00:00"/>
    <updated date="2024-11-18 11:48:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9468" id="RHSA-2024:9468" type="rhsa" title="RHSA-2024:9468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9468.html" id="ALSA-2024:9468" type="self" title="ALSA-2024:9468"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="python3-debug" version="3.9.19" release="8.el9_5.1" epoch="0" arch="s390x" src="python3.9-3.9.19-8.el9_5.1.src.rpm">
          <filename>python3-debug-3.9.19-8.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">07e394a5bd88738a56de1bf57a402a509d4174b0d216dc6ac42bec2aae74f767</sum>
        </package>
        <package name="python3-idle" version="3.9.19" release="8.el9_5.1" epoch="0" arch="s390x" src="python3.9-3.9.19-8.el9_5.1.src.rpm">
          <filename>python3-idle-3.9.19-8.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">d4eacf8cd0171c4fbf1c60fa508cfa67ede2dcb4f82aac2453ceae8772b035f8</sum>
        </package>
        <package name="python3-test" version="3.9.19" release="8.el9_5.1" epoch="0" arch="s390x" src="python3.9-3.9.19-8.el9_5.1.src.rpm">
          <filename>python3-test-3.9.19-8.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">f65423d2d73a108271a50b3b5eb4bec68dd0cbd7110606f53bf973f8f82daf2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9543</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-19 06:01:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.100 and .NET Runtime 9.0.1.0.  

Security Fix(es):  

  * dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component (CVE-2024-43498)
  * dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component (CVE-2024-43499)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):  

  * dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component (CVE-2024-43498)
  * dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component (CVE-2024-43499)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9543" id="RHSA-2024:9543" type="rhsa" title="RHSA-2024:9543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43498" id="CVE-2024-43498" type="cve" title="CVE-2024-43498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43499" id="CVE-2024-43499" type="cve" title="CVE-2024-43499"/>
      <reference href="https://bugzilla.redhat.com/2323239" id="2323239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323240" id="2323240" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9543.html" id="ALSA-2024:9543" type="self" title="ALSA-2024:9543"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.100" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.100-1.el9_5.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.100-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">06ec1afb3477f8a1160fd74681f449c4f18dc6120d45ef79a9adab495a410dee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9548</id>
    <title>Important: openexr security update</title>
    <issued date="2024-11-13 00:00:00"/>
    <updated date="2024-11-18 11:47:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openexr security update</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  

Security Fix(es):  

  * OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9548" id="RHSA-2024:9548" type="rhsa" title="RHSA-2024:9548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5841" id="CVE-2023-5841" type="cve" title="CVE-2023-5841"/>
      <reference href="https://bugzilla.redhat.com/2262397" id="2262397" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9548.html" id="ALSA-2024:9548" type="self" title="ALSA-2024:9548"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="openexr-devel" version="3.1.1" release="2.el9_5.1" epoch="0" arch="s390x" src="openexr-3.1.1-2.el9_5.1.src.rpm">
          <filename>openexr-devel-3.1.1-2.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">9f48e1a33828904b4dea9b8b8a2788f77f4c6cc55864fcb287c7d8bc63b4f6e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9605</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-11-14 00:00:00"/>
    <updated date="2024-11-20 15:31:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: nexthop: Initialize all fields in dumped nexthops (CVE-2024-42283)
  * kernel: iommufd: Require drivers to supply the cache_invalidate_user ops (CVE-2024-46824)
  * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9605" id="RHSA-2024:9605" type="rhsa" title="RHSA-2024:9605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42283" id="CVE-2024-42283" type="cve" title="CVE-2024-42283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46824" id="CVE-2024-46824" type="cve" title="CVE-2024-46824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46858" id="CVE-2024-46858" type="cve" title="CVE-2024-46858"/>
      <reference href="https://bugzilla.redhat.com/2315176" id="2315176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315210" id="2315210" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9605.html" id="ALSA-2024:9605" type="self" title="ALSA-2024:9605"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-cross-headers-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">39e7c76a180342c266488aa3c72360c2899cfc6102ab3168c7d98d073c01b61d</sum>
        </package>
        <package name="libperf" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>libperf-5.14.0-503.14.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">5f6b9fecabc47a0d03176335b6bf9ae9a53aa1562aaecbd6d662fc1748b7abae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9827</id>
    <title>Moderate: libvpx security update</title>
    <issued date="2024-11-18 00:00:00"/>
    <updated date="2024-11-18 11:47:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9827" id="RHSA-2024:9827" type="rhsa" title="RHSA-2024:9827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5197" id="CVE-2024-5197" type="cve" title="CVE-2024-5197"/>
      <reference href="https://bugzilla.redhat.com/2291198" id="2291198" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9827.html" id="ALSA-2024:9827" type="self" title="ALSA-2024:9827"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_4_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_4_default</name>
        <package name="libvpx-devel" version="1.9.0" release="8.el9_5" epoch="0" arch="s390x" src="libvpx-1.9.0-8.el9_5.src.rpm">
          <filename>libvpx-devel-1.9.0-8.el9_5.s390x.rpm</filename>
          <sum type="sha256">4106cdf068bbde446492f2ddc7479a294550b5897327d554e0aaeb05e7fc1d90</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0059</id>
    <title>Important: kernel security update</title>
    <issued date="2025-01-08 00:00:00"/>
    <updated date="2025-01-13 20:08:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: perf/aux: Fix AUX buffer serialization (CVE-2024-46713)
  * kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (CVE-2024-50208)
  * kernel: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CVE-2024-50252)
  * kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0059" id="RHSA-2025:0059" type="rhsa" title="RHSA-2025:0059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46713" id="CVE-2024-46713" type="cve" title="CVE-2024-46713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50208" id="CVE-2024-50208" type="cve" title="CVE-2024-50208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50252" id="CVE-2024-50252" type="cve" title="CVE-2024-50252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53122" id="CVE-2024-53122" type="cve" title="CVE-2024-53122"/>
      <reference href="https://bugzilla.redhat.com/2312221" id="2312221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324611" id="2324611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324898" id="2324898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329932" id="2329932" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0059.html" id="ALSA-2025:0059" type="self" title="ALSA-2025:0059"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-cross-headers-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">631370b878793d2e7aa846eddd650d15f622b35e617101d1dae27fa97912cb06</sum>
        </package>
        <package name="libperf" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>libperf-5.14.0-503.21.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">b8b94566ae7aff0f2eb64cd78e526f2ca9b076f5e1c2973b5008349f7bc674cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0312</id>
    <title>Important: raptor2 security update</title>
    <issued date="2025-01-14 00:00:00"/>
    <updated date="2025-01-15 13:10:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>raptor2 security update</summary>
    <description>Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples.   

Security Fix(es):  

  * raptor: integer underflow when normalizing a URI with the turtle parser (CVE-2024-57823)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0312" id="RHSA-2025:0312" type="rhsa" title="RHSA-2025:0312"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57823" id="CVE-2024-57823" type="cve" title="CVE-2024-57823"/>
      <reference href="https://bugzilla.redhat.com/2336921" id="2336921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0312.html" id="ALSA-2025:0312" type="self" title="ALSA-2025:0312"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="raptor2-devel" version="2.0.15" release="32.el9_5" epoch="0" arch="s390x" src="raptor2-2.0.15-32.el9_5.src.rpm">
          <filename>raptor2-devel-2.0.15-32.el9_5.s390x.rpm</filename>
          <sum type="sha256">f62d3142c26cb45518608dc136f64a55b40ed320e02439900fbeba80235608a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0334</id>
    <title>Moderate: ipa security update</title>
    <issued date="2025-01-15 00:00:00"/>
    <updated date="2025-01-17 21:17:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  

Security Fix(es):  

  * freeipa: Administrative user data leaked through systemd journal (CVE-2024-11029)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0334" id="RHSA-2025:0334" type="rhsa" title="RHSA-2025:0334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11029" id="CVE-2024-11029" type="cve" title="CVE-2024-11029"/>
      <reference href="https://bugzilla.redhat.com/2325557" id="2325557" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0334.html" id="ALSA-2025:0334" type="self" title="ALSA-2025:0334"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="python3-ipatests" version="4.12.2" release="1.el9_5.3" epoch="0" arch="noarch" src="ipa-4.12.2-1.el9_5.3.src.rpm">
          <filename>python3-ipatests-4.12.2-1.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">63c9534df50cf8bcb1e19b77e31e903b15a1c98caad904dce2fa4fe6deeae352</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0377</id>
    <title>Moderate: Security and bug fixes for NetworkManager</title>
    <issued date="2025-01-16 00:00:00"/>
    <updated date="2025-01-17 21:14:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>Security and bug fixes for NetworkManager</summary>
    <description>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.  

Security and bug fix(es):  

  * Routes in table different to main are not deleted on reapply [almalinux-9.5.z] (JIRA:AlmaLinux-73013)
  * Route to VPN server not stored in routing table that is specified by ipv4.route-table [almalinux-9.5.z] (JIRA:AlmaLinux-73166)
  * VPN connections do not support ipv4.routing-rules settings [almalinux-9.5.z] (JIRA:AlmaLinux-73167)
  * CVE-2024-3661 NetworkManager: DHCP routing options can manipulate interface-based VPN traffic [almalinux-9.5.z] (JIRA:AlmaLinux-64726)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0377" id="RHSA-2025:0377" type="rhsa" title="RHSA-2025:0377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3661" id="CVE-2024-3661" type="cve" title="CVE-2024-3661"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0377.html" id="ALSA-2025:0377" type="self" title="ALSA-2025:0377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="NetworkManager-libnm-devel" version="1.48.10" release="5.el9_5" epoch="1" arch="s390x" src="NetworkManager-1.48.10-5.el9_5.src.rpm">
          <filename>NetworkManager-libnm-devel-1.48.10-5.el9_5.s390x.rpm</filename>
          <sum type="sha256">ac4488b8ba7f050738f7a99d7524a5255329223266a894fd281450e07a8c42b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0422</id>
    <title>Moderate: java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-23 11:15:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance array handling (CVE-2025-21502)


Bug Fix(es):  

  * The AlmaLinux OpenJDK packages rely on the copy-jdk-configs package to transfer configuration files to a new updated JDK. With this update, the JDK has been updated to use the latest version of copy-jdk-configs, which has been used for some years on later AlmaLinux versions (AlmaLinux-73867, AlmaLinux-73871, AlmaLinux-73872).


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0422" id="RHSA-2025:0422" type="rhsa" title="RHSA-2025:0422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21502" id="CVE-2025-21502" type="cve" title="CVE-2025-21502"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0422.html" id="ALSA-2025:0422" type="self" title="ALSA-2025:0422"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">10ff4c65d6a95c5c2019edabd6fec03ccf28c404d1028af0d1cffc7bee3db792</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">159f43127207b707839bd617607380988dd0e38fa84858355ebee0779e8b53b8</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">861a55963fd4bfe7f1a514e2cfb65f15ca190b18e2800a42f514e6e5d9b3a865</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">af283db3b2f2cb7a6710991a79d4a8643e400a2a9577a59c110f5f82e667782a</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b60c86ac1712dede9ec7f2c93d8678e5ab4abac1a1f8099b426c944947f759cd</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c0f49e295a504e8e210665b99df11fa38c640f90afa47972b6a075b9cab6db2e</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.14.0.7" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.14.0.7-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">cef13bf563b7d883c016a71f739ae89ebf6fde7083da742fb221fb212c977123</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0426</id>
    <title>Moderate: java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-23 14:58:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance array handling (CVE-2025-21502)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0426" id="RHSA-2025:0426" type="rhsa" title="RHSA-2025:0426"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21502" id="CVE-2025-21502" type="cve" title="CVE-2025-21502"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0426.html" id="ALSA-2025:0426" type="self" title="ALSA-2025:0426"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">05166e96bfe9d0763068726d0c04d04ef913c818d03eb8a73324841ca8c77ab2</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2a800fef1a79c8aa35b594f6825b0ef2b91003ddeda5cb218151907ab326dbf6</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">52ed0f0c2a9044b6b75f8ab7d6c13a75b4d42e6f136743932e51f849ec75120d</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">534eda7b4fa4a06a6222cc3aec0a87cf7ddc63e48bcc9093b17e63a033618802</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c4874a48bf48c154850d647621c2757813428359d0f8788bd850e51f7b7a1f30</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c608862babcf77c7f28fe43e569a625435b2c9387512200a379cc963ef5eff1c</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.6.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.6.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e090ad526259e3ef022e47979e23ae0e074ca5549ef55955e141753fdeeaf897</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0578</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-25 20:33:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: tcp/dccp: Don&amp;#39;t use timer_pending() in reqsk_queue_unlink(). (CVE-2024-50154)
  * kernel: arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275)
  * kernel: i40e: fix race condition by adding filter's intermediate sync state (CVE-2024-53088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0578" id="RHSA-2025:0578" type="rhsa" title="RHSA-2025:0578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50154" id="CVE-2024-50154" type="cve" title="CVE-2024-50154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50275" id="CVE-2024-50275" type="cve" title="CVE-2024-50275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53088" id="CVE-2024-53088" type="cve" title="CVE-2024-53088"/>
      <reference href="https://bugzilla.redhat.com/2324313" id="2324313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327198" id="2327198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327328" id="2327328" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0578.html" id="ALSA-2025:0578" type="self" title="ALSA-2025:0578"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="libperf" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>libperf-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">3a1162333b3dd922dba5d4028d6f9a8c2b6aa187ccddce6e888d74a2a8352958</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-cross-headers-5.14.0-503.22.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">cb85f046c0525d74b0f25c4e2d275f556a84cb5f4ce9244eb8dcb07c420318b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0914</id>
    <title>Moderate: galera and mariadb security update</title>
    <issued date="2025-02-04 00:00:00"/>
    <updated date="2025-02-05 09:49:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>galera and mariadb security update</summary>
    <description>MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.  

Security Fix(es):  

  * mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22084)
  * mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0914" id="RHSA-2025:0914" type="rhsa" title="RHSA-2025:0914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22084" id="CVE-2023-22084" type="cve" title="CVE-2023-22084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21096" id="CVE-2024-21096" type="cve" title="CVE-2024-21096"/>
      <reference href="https://bugzilla.redhat.com/2245023" id="2245023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275452" id="2275452" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0914.html" id="ALSA-2025:0914" type="self" title="ALSA-2025:0914"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="mariadb-embedded-devel" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-embedded-devel-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">0d38cb70e0139b64e133eb1fed2116635df1a7a80707df3a5e4cea44e0efae66</sum>
        </package>
        <package name="mariadb-test" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-test-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">550b41019062db99bb479560313d643c4e002f36d2f59fe697a95ec2bcda16ec</sum>
        </package>
        <package name="mariadb-devel" version="10.5.27" release="1.el9_5" epoch="3" arch="s390x" src="mariadb-10.5.27-1.el9_5.src.rpm">
          <filename>mariadb-devel-10.5.27-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">ae0fe22137527d193b5d950ce9ffc481389c58a6a0e6e1c94590174116db2030</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0936</id>
    <title>Moderate: mingw-glib2 security update</title>
    <issued date="2025-02-04 00:00:00"/>
    <updated date="2025-02-06 08:49:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mingw-glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0936" id="RHSA-2025:0936" type="rhsa" title="RHSA-2025:0936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52533" id="CVE-2024-52533" type="cve" title="CVE-2024-52533"/>
      <reference href="https://bugzilla.redhat.com/2325340" id="2325340" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0936.html" id="ALSA-2025:0936" type="self" title="ALSA-2025:0936"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="mingw32-glib2" version="2.78.6" release="2.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.6-2.el9.src.rpm">
          <filename>mingw32-glib2-2.78.6-2.el9.noarch.rpm</filename>
          <sum type="sha256">128871448c9b21e7438cc3cd483f74cabf6ad09cafb61734200e78dde1ff505f</sum>
        </package>
        <package name="mingw32-glib2-static" version="2.78.6" release="2.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.6-2.el9.src.rpm">
          <filename>mingw32-glib2-static-2.78.6-2.el9.noarch.rpm</filename>
          <sum type="sha256">14c2bcca8f6ae2d21d055d6512d0ab1fa9240841b82a53c8867c02309045b42c</sum>
        </package>
        <package name="mingw64-glib2-static" version="2.78.6" release="2.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.6-2.el9.src.rpm">
          <filename>mingw64-glib2-static-2.78.6-2.el9.noarch.rpm</filename>
          <sum type="sha256">80af2ec3a3e874c32f2aea0701782b80a34937781e0e90351ad79d08faad2031</sum>
        </package>
        <package name="mingw64-glib2" version="2.78.6" release="2.el9" epoch="0" arch="noarch" src="mingw-glib2-2.78.6-2.el9.src.rpm">
          <filename>mingw64-glib2-2.78.6-2.el9.noarch.rpm</filename>
          <sum type="sha256">8db5e55d188be13f2170097af43b9038911ee0712db69a4a9363fe07c8ff5010</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10136</id>
    <title>Important: python3.9 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-02 06:47:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10136" id="RHSA-2025:10136" type="rhsa" title="RHSA-2025:10136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10136.html" id="ALSA-2025:10136" type="self" title="ALSA-2025:10136"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3-test" version="3.9.21" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9_6.1.src.rpm">
          <filename>python3-test-3.9.21-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">bb044d8b0a9319f832cccb909ab976df275a3d41b1aeca84b789f649dcfe8a06</sum>
        </package>
        <package name="python3-debug" version="3.9.21" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9_6.1.src.rpm">
          <filename>python3-debug-3.9.21-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">f2ee81410fe3101eaea981ef3dfd5c3d23602e0f0b28d7b8e6e56e25bae0f5fd</sum>
        </package>
        <package name="python3-idle" version="3.9.21" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9_6.1.src.rpm">
          <filename>python3-idle-3.9.21-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">f5f6b3bd3733741cc3f5ade6859bceb4b27c06eb6ff66205a65b27430e590727</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10148</id>
    <title>Important: python3.11 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-02 13:55:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10148" id="RHSA-2025:10148" type="rhsa" title="RHSA-2025:10148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10148.html" id="ALSA-2025:10148" type="self" title="ALSA-2025:10148"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3.11-test" version="3.11.11" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.1.src.rpm">
          <filename>python3.11-test-3.11.11-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">1bac8f2b0d8799535b73a2e3cfb523d5b09b12310af20953e130100548aec732</sum>
        </package>
        <package name="python3.11-idle" version="3.11.11" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.1.src.rpm">
          <filename>python3.11-idle-3.11.11-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">710e5fa1e12f6255a3d58ae9baf8c3971deac13bf2bd311f8347f8264cfc53aa</sum>
        </package>
        <package name="python3.11-debug" version="3.11.11" release="2.el9_6.1" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.1.src.rpm">
          <filename>python3.11-debug-3.11.11-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">d12af522e2392dd3d9f0f5e4b06bfa53442469bd32e3cffb1a34fb127055abdf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10189</id>
    <title>Important: python3.12 security update</title>
    <issued date="2025-07-02 00:00:00"/>
    <updated date="2025-07-02 13:57:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10189" id="RHSA-2025:10189" type="rhsa" title="RHSA-2025:10189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10189.html" id="ALSA-2025:10189" type="self" title="ALSA-2025:10189"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3.12-debug" version="3.12.9" release="1.el9_6.1" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.1.src.rpm">
          <filename>python3.12-debug-3.12.9-1.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">43149f6ded0bbe344c9523c994289c883fd77f23a028278a9497286ec9c17c12</sum>
        </package>
        <package name="python3.12-idle" version="3.12.9" release="1.el9_6.1" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.1.src.rpm">
          <filename>python3.12-idle-3.12.9-1.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">5657686eee4eca3022e4ecb0f52b7c60451d26fb07bb170b1e85527edd25245c</sum>
        </package>
        <package name="python3.12-test" version="3.12.9" release="1.el9_6.1" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.1.src.rpm">
          <filename>python3.12-test-3.12.9-1.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">f063701d3bc6f61af8c903931ccb3031cb9badaf46e6b9a2d033fb9e1189b3e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10379</id>
    <title>Important: kernel security update</title>
    <issued date="2025-07-07 00:00:00"/>
    <updated date="2025-07-10 13:34:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)
  * kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887)
  * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004)
  * kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846)
  * kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CVE-2025-37799)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10379" id="RHSA-2025:10379" type="rhsa" title="RHSA-2025:10379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49846" id="CVE-2022-49846" type="cve" title="CVE-2022-49846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21759" id="CVE-2025-21759" type="cve" title="CVE-2025-21759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21887" id="CVE-2025-21887" type="cve" title="CVE-2025-21887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22004" id="CVE-2025-22004" type="cve" title="CVE-2025-22004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37799" id="CVE-2025-37799" type="cve" title="CVE-2025-37799"/>
      <reference href="https://bugzilla.redhat.com/2348596" id="2348596" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2355405" id="2355405" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357142" id="2357142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363432" id="2363432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363876" id="2363876" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10379.html" id="ALSA-2025:10379" type="self" title="ALSA-2025:10379"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">021667f1882d1deb7f8c0c78bd7e1d17291fc49fb4c41c8615527078a37efb75</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.25.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1f135a38f16881f93e5e968b2be6cbb99cd3045cfd2a0382f6d187b066d96f88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10585</id>
    <title>Moderate: jq security update</title>
    <issued date="2025-07-08 00:00:00"/>
    <updated date="2025-07-10 13:06:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: jq has signed integer overflow in jv.c:jvp_array_write (CVE-2024-23337)
  * jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10585" id="RHSA-2025:10585" type="rhsa" title="RHSA-2025:10585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23337" id="CVE-2024-23337" type="cve" title="CVE-2024-23337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48060" id="CVE-2025-48060" type="cve" title="CVE-2025-48060"/>
      <reference href="https://bugzilla.redhat.com/2367807" id="2367807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367842" id="2367842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10585.html" id="ALSA-2025:10585" type="self" title="ALSA-2025:10585"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="jq-devel" version="1.6" release="17.el9_6.2" epoch="0" arch="s390x" src="jq-1.6-17.el9_6.2.src.rpm">
          <filename>jq-devel-1.6-17.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">20d1faa02ec582b64cbbc670b3fc3bee5200f7038fb49bb7906d7853ebc1b96f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10837</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-07-14 00:00:00"/>
    <updated date="2025-07-17 08:20:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10837" id="RHSA-2025:10837" type="rhsa" title="RHSA-2025:10837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21991" id="CVE-2025-21991" type="cve" title="CVE-2025-21991"/>
      <reference href="https://bugzilla.redhat.com/2356917" id="2356917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10837.html" id="ALSA-2025:10837" type="self" title="ALSA-2025:10837"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7019e09233b506bab150c4f9ddcbf1ce31d4e78053dd0594e35c08b588b81101</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.26.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b3dfbc11c8e14af009977366d2b605a5653bc8bb5af41139305c0ce251ac17e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10867</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 12:49:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve HTTP client header handling (CVE-2025-50059)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102668, AlmaLinux-102669, AlmaLinux-102670, AlmaLinux-102672)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10867" id="RHSA-2025:10867" type="rhsa" title="RHSA-2025:10867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50059" id="CVE-2025-50059" type="cve" title="CVE-2025-50059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10867.html" id="ALSA-2025:10867" type="self" title="ALSA-2025:10867"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">11577e55f0aeb5bd22977b130d08ecc506743ef7ed949a97a50b57db78a33abf</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1637a54fb52152982330fec1e830caf1ef147c16a116ad3984b69e75052d8170</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2493ed0d7c540f19a2d4a5c3692a65930fc499aa916ad38652bb828fa2b80c00</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">44a9ef8f07afadb43b9071c24c8a941e48aace05e627e65e729b6f354a9929ea</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">5b3ec522027a3ded06aa0e363cfba3277a6e5ff0086975bc16d5cff121256555</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">670204704ae6bce7bec7c371e5f05f392421c6cd8c79e3cce4b5b29981d42fa1</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.16.0.8" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.16.0.8-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ddc47ec3d15a05d4c849982acc177acca6fbe2cfcbdfbf9bbb5863e5373b3c81</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10873</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2025-07-16 00:00:00"/>
    <updated date="2025-07-30 13:13:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve HTTP client header handling (CVE-2025-50059)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102683, AlmaLinux-102684, AlmaLinux-102685)
  * On NUMA systems, the operating system can choose to migrate a task from one NUMA node to another. In the G1 garbage collector, G1AllocRegion objects are associated with NUMA nodes. The G1Allocator code assumes that obtaining the G1AllocRegion object for the current thread is sufficient, but OS scheduling can lead to arbitrary changes in the NUMA-to-thread association. This can cause crashes when the G1AllocRegion being used changes mid-operation. This update resolves this issue by always using the same NUMA node and associated G1AllocRegion object throughout an operation. (AlmaLinux-90307, AlmaLinux-90308, AlmaLinux-90311)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10873" id="RHSA-2025:10873" type="rhsa" title="RHSA-2025:10873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50059" id="CVE-2025-50059" type="cve" title="CVE-2025-50059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10873.html" id="ALSA-2025:10873" type="self" title="ALSA-2025:10873"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0d1e8ffb946d81b42810ffe387a3c766dd6b6337145a58398e426a5cb8283bef</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">94f48583de2d6a8cc55cb760fa90d19412ec2369063d52ac39b7c42d9bd4883f</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">969a17621ad825177e73720f0d4617bfc9c21f00f5a980d6a95deff65ab92b80</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b64c5bdc434f9809afc3e14f4e922281b0b038d8ee3d184bafac132b6b32d14e</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">bd1eac1f970e3c40fbd9e40710d1286be3adbf746cbf4d677b068c9f50589cbc</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c8edeea442f604a900ab0006850129a596e8a5dfa8de13a55d51aedeed9cb4aa</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.8.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.8.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ed05d25be0cf3af60990d3b86279f81540d0dda7bfb8dbe2b9188fcdf7911855</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11140</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 12:44:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)
  * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar (CVE-2025-4373)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11140" id="RHSA-2025:11140" type="rhsa" title="RHSA-2025:11140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52533" id="CVE-2024-52533" type="cve" title="CVE-2024-52533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4373" id="CVE-2025-4373" type="cve" title="CVE-2025-4373"/>
      <reference href="https://bugzilla.redhat.com/2325340" id="2325340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2364265" id="2364265" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11140.html" id="ALSA-2025:11140" type="self" title="ALSA-2025:11140"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="glib2-static" version="2.68.4" release="16.el9_6.2" epoch="0" arch="s390x" src="glib2-2.68.4-16.el9_6.2.src.rpm">
          <filename>glib2-static-2.68.4-16.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">a83dc52875cee3dca4a7a2e80a1405e7e20b8f11251fc42cbac988f349d6c829</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11411</id>
    <title>Important: kernel security update</title>
    <issued date="2025-07-21 00:00:00"/>
    <updated date="2025-07-23 07:41:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002)
  * kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CVE-2025-38089)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11411" id="RHSA-2025:11411" type="rhsa" title="RHSA-2025:11411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58002" id="CVE-2024-58002" type="cve" title="CVE-2024-58002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38089" id="CVE-2025-38089" type="cve" title="CVE-2025-38089"/>
      <reference href="https://bugzilla.redhat.com/2348513" id="2348513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375529" id="2375529" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11411.html" id="ALSA-2025:11411" type="self" title="ALSA-2025:11411"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">03aab6de5cbbfdf702818fe821ecef6b766582a2d43fa73f5bb10d0ad4e14e2d</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.28.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">53132e67c523b176164c356c9f585f17b7cacb36b42b74889e316ae18eb651f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11849</id>
    <title>Important: unbound security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-28 14:51:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Unbound Cache poisoning (CVE-2025-5994)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11849" id="RHSA-2025:11849" type="rhsa" title="RHSA-2025:11849"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5994" id="CVE-2025-5994" type="cve" title="CVE-2025-5994"/>
      <reference href="https://bugzilla.redhat.com/2380949" id="2380949" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11849.html" id="ALSA-2025:11849" type="self" title="ALSA-2025:11849"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="unbound-devel" version="1.16.2" release="19.el9_6.1" epoch="0" arch="s390x" src="unbound-1.16.2-19.el9_6.1.src.rpm">
          <filename>unbound-devel-1.16.2-19.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">32a7803f56970f4fdb1911b1fdb3a6808b448029092c9f7efa4256420cdd7c6e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11861</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-31 22:26:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)
  * kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905)
  * kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)
  * kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)
  * kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113)
  * kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085)
  * kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)
  * kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958)
  * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086)
  * kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11861" id="RHSA-2025:11861" type="rhsa" title="RHSA-2025:11861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57980" id="CVE-2024-57980" type="cve" title="CVE-2024-57980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21905" id="CVE-2025-21905" type="cve" title="CVE-2025-21905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22085" id="CVE-2025-22085" type="cve" title="CVE-2025-22085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22091" id="CVE-2025-22091" type="cve" title="CVE-2025-22091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22113" id="CVE-2025-22113" type="cve" title="CVE-2025-22113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22121" id="CVE-2025-22121" type="cve" title="CVE-2025-22121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37797" id="CVE-2025-37797" type="cve" title="CVE-2025-37797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37958" id="CVE-2025-37958" type="cve" title="CVE-2025-37958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38086" id="CVE-2025-38086" type="cve" title="CVE-2025-38086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38110" id="CVE-2025-38110" type="cve" title="CVE-2025-38110"/>
      <reference href="https://bugzilla.redhat.com/2348599" id="2348599" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356613" id="2356613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360186" id="2360186" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360199" id="2360199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360212" id="2360212" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360219" id="2360219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363672" id="2363672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367572" id="2367572" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375305" id="2375305" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376035" id="2376035" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11861.html" id="ALSA-2025:11861" type="self" title="ALSA-2025:11861"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libperf" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">60d8515d3dd78076f53cc7eb47301f8d17dd6bce7e27d5012f1bdb53a791a3a4</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.30.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b26f44df6e8a492b9dfab79cb758bb78e6224343e436f481828201f67d1145a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1262</id>
    <title>Important: kernel security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-13 16:31:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1262" id="RHSA-2025:1262" type="rhsa" title="RHSA-2025:1262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53104" id="CVE-2024-53104" type="cve" title="CVE-2024-53104"/>
      <reference href="https://bugzilla.redhat.com/2329817" id="2329817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1262.html" id="ALSA-2025:1262" type="self" title="ALSA-2025:1262"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="libperf" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>libperf-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">23924e03594721d64f3ede30df6d7b0f20935f2af815e0f1da8fafb37ab75c96</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-cross-headers-5.14.0-503.23.2.el9_5.s390x.rpm</filename>
          <sum type="sha256">b59c7b0c3786d9297b1a9a3789965b9f9c1352d4c7e0c5594ce9b53fc0ece919</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12746</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-04 00:00:00"/>
    <updated date="2025-08-07 11:24:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
  * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)
  * kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CVE-2025-21929)
  * kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962)
  * kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020)
  * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788)
  * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)
  * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052)
  * kernel: net/sched: fix use-after-free in taprio_dev_notifier (CVE-2025-38087)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12746" id="RHSA-2025:12746" type="rhsa" title="RHSA-2025:12746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49788" id="CVE-2022-49788" type="cve" title="CVE-2022-49788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21727" id="CVE-2025-21727" type="cve" title="CVE-2025-21727"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21928" id="CVE-2025-21928" type="cve" title="CVE-2025-21928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21929" id="CVE-2025-21929" type="cve" title="CVE-2025-21929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21962" id="CVE-2025-21962" type="cve" title="CVE-2025-21962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22020" id="CVE-2025-22020" type="cve" title="CVE-2025-22020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37890" id="CVE-2025-37890" type="cve" title="CVE-2025-37890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38052" id="CVE-2025-38052" type="cve" title="CVE-2025-38052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38087" id="CVE-2025-38087" type="cve" title="CVE-2025-38087"/>
      <reference href="https://bugzilla.redhat.com/2348516" id="2348516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356592" id="2356592" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356594" id="2356594" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356624" id="2356624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360099" id="2360099" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363378" id="2363378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366848" id="2366848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373380" id="2373380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375531" id="2375531" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12746.html" id="ALSA-2025:12746" type="self" title="ALSA-2025:12746"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">2e187f77f8a36f6ebc0551bf38ac5d7ed27d69d9067f8d500aadc8e78b7780e2</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.32.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">551dd34548fe94164ae7c641d9310a0b7bb486f4a47b3b8347f9c4a76f6fa436</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12834</id>
    <title>Moderate: python3.12-setuptools security update</title>
    <issued date="2025-08-05 00:00:00"/>
    <updated date="2025-08-06 05:36:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12-setuptools security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12834" id="RHSA-2025:12834" type="rhsa" title="RHSA-2025:12834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12834.html" id="ALSA-2025:12834" type="self" title="ALSA-2025:12834"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3.12-setuptools-wheel" version="68.2.2" release="5.el9_6" epoch="0" arch="noarch" src="python3.12-setuptools-68.2.2-5.el9_6.src.rpm">
          <filename>python3.12-setuptools-wheel-68.2.2-5.el9_6.noarch.rpm</filename>
          <sum type="sha256">83201e0efc35e4acac2f56109e56c0bfecd0dcf82c365da609724664ce30f19b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1329</id>
    <title>Moderate: doxygen security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-12 12:17:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>doxygen security update</summary>
    <description>Doxygen can generate an online class browser (in HTML) and/or a reference manual (in LaTeX) from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files.   

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1329" id="RHSA-2025:1329" type="rhsa" title="RHSA-2025:1329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1329.html" id="ALSA-2025:1329" type="self" title="ALSA-2025:1329"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="doxygen-doxywizard" version="1.9.1" release="12.el9_5" epoch="1" arch="s390x" src="doxygen-1.9.1-12.el9_5.src.rpm">
          <filename>doxygen-doxywizard-1.9.1-12.el9_5.s390x.rpm</filename>
          <sum type="sha256">930af920c0e059143f13edf0db693facf3044acf9a538e20fea19dc099959b5a</sum>
        </package>
        <package name="doxygen-latex" version="1.9.1" release="12.el9_5" epoch="1" arch="s390x" src="doxygen-1.9.1-12.el9_5.src.rpm">
          <filename>doxygen-latex-1.9.1-12.el9_5.s390x.rpm</filename>
          <sum type="sha256">c6b6eb5762e793d047989f5fe77d45393e17e946eceeed7352768a46625e8229</sum>
        </package>
        <package name="doxygen" version="1.9.1" release="12.el9_5" epoch="1" arch="s390x" src="doxygen-1.9.1-12.el9_5.src.rpm">
          <filename>doxygen-1.9.1-12.el9_5.s390x.rpm</filename>
          <sum type="sha256">d27da5b2835b4b78359853656e96a1c781ea91f401fc8b9d77efc3b4b4b388f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1346</id>
    <title>Moderate: gcc security update</title>
    <issued date="2025-02-12 00:00:00"/>
    <updated date="2025-02-14 07:49:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc security update</summary>
    <description>The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1346" id="RHSA-2025:1346" type="rhsa" title="RHSA-2025:1346"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1346.html" id="ALSA-2025:1346" type="self" title="ALSA-2025:1346"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="libstdc++-static" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>libstdc++-static-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">567f8ebe4bd7c5437f9ea2d4f72015441ced5d97739c925a26bcae999d409f70</sum>
        </package>
        <package name="gcc-plugin-devel" version="11.5.0" release="5.el9_5.alma.1" epoch="0" arch="s390x" src="gcc-11.5.0-5.el9_5.alma.1.src.rpm">
          <filename>gcc-plugin-devel-11.5.0-5.el9_5.alma.1.s390x.rpm</filename>
          <sum type="sha256">a8e2d3da7d07b48d059233d9e1749a11eb75b205006fcdfec7121ec7b0b95152</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13602</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-08-11 00:00:00"/>
    <updated date="2025-08-15 10:33:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)


The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
  * kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13602" id="RHSA-2025:13602" type="rhsa" title="RHSA-2025:13602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38079" id="CVE-2025-38079" type="cve" title="CVE-2025-38079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38292" id="CVE-2025-38292" type="cve" title="CVE-2025-38292"/>
      <reference href="https://bugzilla.redhat.com/2373383" id="2373383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379219" id="2379219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13602.html" id="ALSA-2025:13602" type="self" title="ALSA-2025:13602"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libperf" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">0448a10fde15933d36d6a61cae5b5f07b4adba7723cacfa24c9c36e21d9a9d6a</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.33.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">bb6d58fdec7162b2734510c1d31fb2ddfcdd73eafd630cd035488aa0f3bc5666</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13962</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-18 00:00:00"/>
    <updated date="2025-08-22 07:57:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CVE-2025-21867)
  * microcode_ctl: From CVEorg collector (CVE-2024-28956)
  * kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084)
  * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)
  * kernel: net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124)
  * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)
  * kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250)
  * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380)
  * kernel: tls: always refresh the queue when reading sock (CVE-2025-38471)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13962" id="RHSA-2025:13962" type="rhsa" title="RHSA-2025:13962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28956" id="CVE-2024-28956" type="cve" title="CVE-2024-28956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21867" id="CVE-2025-21867" type="cve" title="CVE-2025-21867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38084" id="CVE-2025-38084" type="cve" title="CVE-2025-38084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38085" id="CVE-2025-38085" type="cve" title="CVE-2025-38085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38124" id="CVE-2025-38124" type="cve" title="CVE-2025-38124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38159" id="CVE-2025-38159" type="cve" title="CVE-2025-38159"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38250" id="CVE-2025-38250" type="cve" title="CVE-2025-38250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38380" id="CVE-2025-38380" type="cve" title="CVE-2025-38380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38471" id="CVE-2025-38471" type="cve" title="CVE-2025-38471"/>
      <reference href="https://bugzilla.redhat.com/2355334" id="2355334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366125" id="2366125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375303" id="2375303" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375304" id="2375304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376041" id="2376041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376064" id="2376064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378982" id="2378982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383381" id="2383381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383893" id="2383893" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13962.html" id="ALSA-2025:13962" type="self" title="ALSA-2025:13962"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">038424cee90cfbe7dc9c0a6bce2c2ea7124fd9c6ca1ea17c25aa60eebde90654</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.35.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">66c26e1e100525f01069a0627afa4594833412fd22c5350b5fde8498900a7cf8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14420</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-25 00:00:00"/>
    <updated date="2025-08-27 12:00:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
  * kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)
  * kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14420" id="RHSA-2025:14420" type="rhsa" title="RHSA-2025:14420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22058" id="CVE-2025-22058" type="cve" title="CVE-2025-22058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37914" id="CVE-2025-37914" type="cve" title="CVE-2025-37914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38417" id="CVE-2025-38417" type="cve" title="CVE-2025-38417"/>
      <reference href="https://bugzilla.redhat.com/2360276" id="2360276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367500" id="2367500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383463" id="2383463" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14420.html" id="ALSA-2025:14420" type="self" title="ALSA-2025:14420"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">052119c2948b7c78aac8f944c5e7dfbbedab90e57e808ab4f6eb6e53ac1771eb</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.37.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c2bd823054c4f3b1a9a31fd3f5bdd96ee1df5754f03122b48205b17c5bd55adf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14878</id>
    <title>Important: postgresql security update</title>
    <issued date="2025-08-28 00:00:00"/>
    <updated date="2025-08-29 06:49:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
  * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14878" id="RHSA-2025:14878" type="rhsa" title="RHSA-2025:14878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8714" id="CVE-2025-8714" type="cve" title="CVE-2025-8714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8715" id="CVE-2025-8715" type="cve" title="CVE-2025-8715"/>
      <reference href="https://bugzilla.redhat.com/2388551" id="2388551" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388553" id="2388553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14878.html" id="ALSA-2025:14878" type="self" title="ALSA-2025:14878"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="postgresql-docs" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-docs-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">6129403de32cd734bcfe114ae063a96965771fb274c8e99ff03bd988d48e4dc7</sum>
        </package>
        <package name="postgresql-static" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-static-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">72ade605a5e773211ce8c8cb98c086efc12859af694aef9707f4585f716367dd</sum>
        </package>
        <package name="postgresql-server-devel" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-server-devel-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">86525ad00c9b5e1509c15e71cdc82b8532cdf4d0c0dd68060c5613c0b5c6aaeb</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.22" release="1.el9_6" epoch="0" arch="noarch" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-test-rpm-macros-13.22-1.el9_6.noarch.rpm</filename>
          <sum type="sha256">88c18db9bf4a72203801e595dd0f50c658e931d0189ebe0d2fb782adc972a2bf</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-upgrade-devel-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8b099ef4c5c5943dc26094a4734dc4b264ee392fea0a6f8eee81e8676006a8bd</sum>
        </package>
        <package name="postgresql-private-devel" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-private-devel-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e67f53ba51bff705bb31f5c24c0011d5de49897b3e1976c5662fe2e26cd5ec56</sum>
        </package>
        <package name="postgresql-test" version="13.22" release="1.el9_6" epoch="0" arch="s390x" src="postgresql-13.22-1.el9_6.src.rpm">
          <filename>postgresql-test-13.22-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ec0794181fbb60e5fe6f3f8c0255a158410ed59d2624d42b85fe4e123032a413</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15007</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:23:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15007" id="RHSA-2025:15007" type="rhsa" title="RHSA-2025:15007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15007.html" id="ALSA-2025:15007" type="self" title="ALSA-2025:15007"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3.12-idle" version="3.12.9" release="1.el9_6.2" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.2.src.rpm">
          <filename>python3.12-idle-3.12.9-1.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">05f5c299989b0d34fc3116c20b7fe55d990a24d70adaf0d8f4fcd58cc4e33482</sum>
        </package>
        <package name="python3.12-debug" version="3.12.9" release="1.el9_6.2" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.2.src.rpm">
          <filename>python3.12-debug-3.12.9-1.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">150f8d537fa5c5bb5475c5856edca972a6a8859daf7318e4099aa1b5cf9df9ea</sum>
        </package>
        <package name="python3.12-test" version="3.12.9" release="1.el9_6.2" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9_6.2.src.rpm">
          <filename>python3.12-test-3.12.9-1.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">777978cb82abebd10e0d4c4e13a5fa674318eeeb29f4dbb05ac33e616e71eb86</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15010</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:21:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15010" id="RHSA-2025:15010" type="rhsa" title="RHSA-2025:15010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15010.html" id="ALSA-2025:15010" type="self" title="ALSA-2025:15010"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3.11-debug" version="3.11.11" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.2.src.rpm">
          <filename>python3.11-debug-3.11.11-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">2cf5ce55f45f3465826d9ffe912eeede5c49ec551f49d56ce42aa310cf968e90</sum>
        </package>
        <package name="python3.11-idle" version="3.11.11" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.2.src.rpm">
          <filename>python3.11-idle-3.11.11-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">8986528375c8e6ce2d87cf369cc0be6bfcdd60ca7fcf86cc42c5bb64140d37d6</sum>
        </package>
        <package name="python3.11-test" version="3.11.11" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9_6.2.src.rpm">
          <filename>python3.11-test-3.11.11-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">ccd4c6763afcb87c2f4a24823296e757b443176af1f4bfc8d6c37597460057aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15011</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:19:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823)
  * kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)
  * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)
  * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)
  * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464)
  * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)
  * kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15011" id="RHSA-2025:15011" type="rhsa" title="RHSA-2025:15011"/>
      <reference href="https://bugzilla.redhat.com/2365024" id="2365024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376392" id="2376392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376406" id="2376406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382054" id="2382054" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383509" id="2383509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383513" id="2383513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2387866" id="2387866" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15011.html" id="ALSA-2025:15011" type="self" title="ALSA-2025:15011"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-37823.html" id="CVE-2025-37823" type="cve" title="CVE-2025-37823"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38200.html" id="CVE-2025-38200" type="cve" title="CVE-2025-38200"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38211.html" id="CVE-2025-38211" type="cve" title="CVE-2025-38211"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38350.html" id="CVE-2025-38350" type="cve" title="CVE-2025-38350"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38461.html" id="CVE-2025-38461" type="cve" title="CVE-2025-38461"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38464.html" id="CVE-2025-38464" type="cve" title="CVE-2025-38464"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38500.html" id="CVE-2025-38500" type="cve" title="CVE-2025-38500"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38684.html" id="CVE-2025-38684" type="cve" title="CVE-2025-38684"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libperf" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">582957b90da83e4bbca338d8f17a9033f0dc84000276d625a020361bea92d2ba</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.39.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">725e4b1f36b96df7348fedee32dae146cddc644bd735da9b6b090f1036014617</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15018</id>
    <title>Important: udisks2 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:13:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>udisks2 security update</summary>
    <description>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.  

Security Fix(es):  

  * udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15018" id="RHSA-2025:15018" type="rhsa" title="RHSA-2025:15018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8067" id="CVE-2025-8067" type="cve" title="CVE-2025-8067"/>
      <reference href="https://bugzilla.redhat.com/2388623" id="2388623" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15018.html" id="ALSA-2025:15018" type="self" title="ALSA-2025:15018"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libudisks2-devel" version="2.9.4" release="11.el9_6.1" epoch="0" arch="s390x" src="udisks2-2.9.4-11.el9_6.1.src.rpm">
          <filename>libudisks2-devel-2.9.4-11.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">d0805b3108fa39a10662cfa4136c98d84da519e9cb89dc572a359c67c2dc7ad4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15019</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:10:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15019" id="RHSA-2025:15019" type="rhsa" title="RHSA-2025:15019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15019.html" id="ALSA-2025:15019" type="self" title="ALSA-2025:15019"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3-debug" version="3.9.21" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9_6.2.src.rpm">
          <filename>python3-debug-3.9.21-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">765fbfa5aea829b5d6f8f0538d3f40e6fa41c70549d21a4d1b609d6964f5c304</sum>
        </package>
        <package name="python3-idle" version="3.9.21" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9_6.2.src.rpm">
          <filename>python3-idle-3.9.21-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">ca142fd2b5021c87ffdb26430445638446a42c7ec697102c4c609152720188b2</sum>
        </package>
        <package name="python3-test" version="3.9.21" release="2.el9_6.2" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9_6.2.src.rpm">
          <filename>python3-test-3.9.21-2.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">f244d20c73f47929d3b738e5015602c5c7eb7d37e3497cdd1e117ccfc6a0da93</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15429</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-08 00:00:00"/>
    <updated date="2025-09-15 09:02:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: udmabuf: fix a buf size overflow issue during udmabuf creation (CVE-2025-37803)
  * kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15429" id="RHSA-2025:15429" type="rhsa" title="RHSA-2025:15429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37803" id="CVE-2025-37803" type="cve" title="CVE-2025-37803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38392" id="CVE-2025-38392" type="cve" title="CVE-2025-38392"/>
      <reference href="https://bugzilla.redhat.com/2365013" id="2365013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383407" id="2383407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15429.html" id="ALSA-2025:15429" type="self" title="ALSA-2025:15429"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libperf" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c8c0ccb1dfbfc38f10676e4e31dde1f94b2681c1ebd4d1530a762cb89dd0d60d</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.41.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">fd839780dd7ff7af892cdab20ad223dbef912e83a8162e1a5801b41dfb151c05</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15661</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-11 00:00:00"/>
    <updated date="2025-09-16 09:35:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097)
  * kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332)
  * kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352)
  * kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15661" id="RHSA-2025:15661" type="rhsa" title="RHSA-2025:15661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22097" id="CVE-2025-22097" type="cve" title="CVE-2025-22097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38332" id="CVE-2025-38332" type="cve" title="CVE-2025-38332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38352" id="CVE-2025-38352" type="cve" title="CVE-2025-38352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38449" id="CVE-2025-38449" type="cve" title="CVE-2025-38449"/>
      <reference href="https://bugzilla.redhat.com/2360223" id="2360223" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379246" id="2379246" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382581" id="2382581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383519" id="2383519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15661.html" id="ALSA-2025:15661" type="self" title="ALSA-2025:15661"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libperf" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">44a69575297bf1d7c1614dfe7af0b6376a75f27671ca4094f208b68e4c7d8d6b</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.42.2.el9_6.s390x.rpm</filename>
          <sum type="sha256">fe75b2ec7fe6c3ed0b598ede03496a1a8411be36612b27475e2c1531526b9ade</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15740</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-15 00:00:00"/>
    <updated date="2025-09-25 08:47:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: mcast: Delay put pmc-&gt;idev in mld_del_delrec() (CVE-2025-38550)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15740" id="RHSA-2025:15740" type="rhsa" title="RHSA-2025:15740"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38550" id="CVE-2025-38550" type="cve" title="CVE-2025-38550"/>
      <reference href="https://bugzilla.redhat.com/2388941" id="2388941" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15740.html" id="ALSA-2025:15740" type="self" title="ALSA-2025:15740"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libperf" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">39224d909a46486b46d25b3b8e4c613bddefbb320e69579952efcae17f1b167f</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.44.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">dc3ec5c43632f1ea47f0887f8155832168430232fd519cdabae4218b7b1539ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16086</id>
    <title>Moderate: mysql security update</title>
    <issued date="2025-09-17 00:00:00"/>
    <updated date="2025-09-29 08:50:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688)
  * mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699)
  * mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683)
  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715)
  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687)
  * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580)
  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696)
  * mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705)
  * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575)
  * mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685)
  * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
  * mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584)
  * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092)
  * mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077)
  * mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085)
  * mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082)
  * mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087)
  * mysql: Replication unspecified vulnerability (CPU Jul 2025) (CVE-2025-53023)
  * mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100)
  * mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16086" id="RHSA-2025:16086" type="rhsa" title="RHSA-2025:16086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21574" id="CVE-2025-21574" type="cve" title="CVE-2025-21574"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21575" id="CVE-2025-21575" type="cve" title="CVE-2025-21575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21577" id="CVE-2025-21577" type="cve" title="CVE-2025-21577"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21579" id="CVE-2025-21579" type="cve" title="CVE-2025-21579"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21580" id="CVE-2025-21580" type="cve" title="CVE-2025-21580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21581" id="CVE-2025-21581" type="cve" title="CVE-2025-21581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21584" id="CVE-2025-21584" type="cve" title="CVE-2025-21584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21585" id="CVE-2025-21585" type="cve" title="CVE-2025-21585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30681" id="CVE-2025-30681" type="cve" title="CVE-2025-30681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30682" id="CVE-2025-30682" type="cve" title="CVE-2025-30682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30683" id="CVE-2025-30683" type="cve" title="CVE-2025-30683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30684" id="CVE-2025-30684" type="cve" title="CVE-2025-30684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30685" id="CVE-2025-30685" type="cve" title="CVE-2025-30685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30687" id="CVE-2025-30687" type="cve" title="CVE-2025-30687"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30688" id="CVE-2025-30688" type="cve" title="CVE-2025-30688"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30689" id="CVE-2025-30689" type="cve" title="CVE-2025-30689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30693" id="CVE-2025-30693" type="cve" title="CVE-2025-30693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30695" id="CVE-2025-30695" type="cve" title="CVE-2025-30695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30696" id="CVE-2025-30696" type="cve" title="CVE-2025-30696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30699" id="CVE-2025-30699" type="cve" title="CVE-2025-30699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30703" id="CVE-2025-30703" type="cve" title="CVE-2025-30703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30704" id="CVE-2025-30704" type="cve" title="CVE-2025-30704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30705" id="CVE-2025-30705" type="cve" title="CVE-2025-30705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30715" id="CVE-2025-30715" type="cve" title="CVE-2025-30715"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30721" id="CVE-2025-30721" type="cve" title="CVE-2025-30721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30722" id="CVE-2025-30722" type="cve" title="CVE-2025-30722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50077" id="CVE-2025-50077" type="cve" title="CVE-2025-50077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50078" id="CVE-2025-50078" type="cve" title="CVE-2025-50078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50079" id="CVE-2025-50079" type="cve" title="CVE-2025-50079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50080" id="CVE-2025-50080" type="cve" title="CVE-2025-50080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50081" id="CVE-2025-50081" type="cve" title="CVE-2025-50081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50082" id="CVE-2025-50082" type="cve" title="CVE-2025-50082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50083" id="CVE-2025-50083" type="cve" title="CVE-2025-50083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50084" id="CVE-2025-50084" type="cve" title="CVE-2025-50084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50085" id="CVE-2025-50085" type="cve" title="CVE-2025-50085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50086" id="CVE-2025-50086" type="cve" title="CVE-2025-50086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50087" id="CVE-2025-50087" type="cve" title="CVE-2025-50087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50088" id="CVE-2025-50088" type="cve" title="CVE-2025-50088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50091" id="CVE-2025-50091" type="cve" title="CVE-2025-50091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50092" id="CVE-2025-50092" type="cve" title="CVE-2025-50092"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50093" id="CVE-2025-50093" type="cve" title="CVE-2025-50093"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50094" id="CVE-2025-50094" type="cve" title="CVE-2025-50094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50096" id="CVE-2025-50096" type="cve" title="CVE-2025-50096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50097" id="CVE-2025-50097" type="cve" title="CVE-2025-50097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50098" id="CVE-2025-50098" type="cve" title="CVE-2025-50098"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50099" id="CVE-2025-50099" type="cve" title="CVE-2025-50099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50100" id="CVE-2025-50100" type="cve" title="CVE-2025-50100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50101" id="CVE-2025-50101" type="cve" title="CVE-2025-50101"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50102" id="CVE-2025-50102" type="cve" title="CVE-2025-50102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50104" id="CVE-2025-50104" type="cve" title="CVE-2025-50104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53023" id="CVE-2025-53023" type="cve" title="CVE-2025-53023"/>
      <reference href="https://bugzilla.redhat.com/2359885" id="2359885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359888" id="2359888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359892" id="2359892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359894" id="2359894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359895" id="2359895" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359899" id="2359899" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359900" id="2359900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359902" id="2359902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359903" id="2359903" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359918" id="2359918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359920" id="2359920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359924" id="2359924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359928" id="2359928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359930" id="2359930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359932" id="2359932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359934" id="2359934" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359938" id="2359938" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359940" id="2359940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359943" id="2359943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359944" id="2359944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359945" id="2359945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359947" id="2359947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359950" id="2359950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359963" id="2359963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359964" id="2359964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359972" id="2359972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380264" id="2380264" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380273" id="2380273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380274" id="2380274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380278" id="2380278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380280" id="2380280" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380283" id="2380283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380284" id="2380284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380290" id="2380290" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380291" id="2380291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380295" id="2380295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380298" id="2380298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380306" id="2380306" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380308" id="2380308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380309" id="2380309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380310" id="2380310" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380311" id="2380311" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380312" id="2380312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380313" id="2380313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380320" id="2380320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380321" id="2380321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380322" id="2380322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380326" id="2380326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380327" id="2380327" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380334" id="2380334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380335" id="2380335" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16086.html" id="ALSA-2025:16086" type="self" title="ALSA-2025:16086"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="mysql-devel" version="8.0.43" release="1.el9_6" epoch="0" arch="s390x" src="mysql-8.0.43-1.el9_6.src.rpm">
          <filename>mysql-devel-8.0.43-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">1dc3c54c196bde19dec297f95d2f423543c1e965662eeae59512215b688d0e2e</sum>
        </package>
        <package name="mysql-test" version="8.0.43" release="1.el9_6" epoch="0" arch="s390x" src="mysql-8.0.43-1.el9_6.src.rpm">
          <filename>mysql-test-8.0.43-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">e9f13ea01a44905751b7cc0e74951a80e5902e4267b0c1a3a75f4447a41149f4</sum>
        </package>
        <package name="mysql-libs" version="8.0.43" release="1.el9_6" epoch="0" arch="s390x" src="mysql-8.0.43-1.el9_6.src.rpm">
          <filename>mysql-libs-8.0.43-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ee6112407190b6205d66e06ac866fd0d96791be644dfa9cde586a609b5cee661</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16398</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-22 00:00:00"/>
    <updated date="2025-09-29 08:44:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: usb: smsc75xx: Limit packet length to skb-&gt;len (CVE-2023-53125)
  * kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length (CVE-2025-37810)
  * kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498)
  * kernel: s390/sclp: Fix SCCB present check (CVE-2025-39694)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16398" id="RHSA-2025:16398" type="rhsa" title="RHSA-2025:16398"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53125" id="CVE-2023-53125" type="cve" title="CVE-2023-53125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37810" id="CVE-2025-37810" type="cve" title="CVE-2025-37810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38498" id="CVE-2025-38498" type="cve" title="CVE-2025-38498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39694" id="CVE-2025-39694" type="cve" title="CVE-2025-39694"/>
      <reference href="https://bugzilla.redhat.com/2363686" id="2363686" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2365028" id="2365028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2384422" id="2384422" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393534" id="2393534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16398.html" id="ALSA-2025:16398" type="self" title="ALSA-2025:16398"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4e4fce7af61f60a2fb8eda7aeaecf301220bb4bdda15b5cb48beb1190d0d80aa</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.46.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">f90718445d514fe0cd4776dd667aa83a1ac3f1c3f584d4d66f0cd0c5999af7e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1659</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-03-04 08:49:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: mm: migrate: fix getting incorrect page mapping during page migration (CVE-2023-52490)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1659" id="RHSA-2025:1659" type="rhsa" title="RHSA-2025:1659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52490" id="CVE-2023-52490" type="cve" title="CVE-2023-52490"/>
      <reference href="https://bugzilla.redhat.com/2269187" id="2269187" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1659.html" id="ALSA-2025:1659" type="self" title="ALSA-2025:1659"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-cross-headers-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">a34c585eb94887bd3978f486223fa7989ac650a1315f1a009a70f376375c7617</sum>
        </package>
        <package name="libperf" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>libperf-5.14.0-503.26.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e31458f7b3d1583afd0dc984cdf3deeae60b30f97713e062f76b4362506c0cb9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1670</id>
    <title>Important: bind9.18 security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-02-24 10:51:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.18 security update</summary>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  

Security Fix(es):  

  * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)
  * bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load (CVE-2024-12705)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1670" id="RHSA-2025:1670" type="rhsa" title="RHSA-2025:1670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11187" id="CVE-2024-11187" type="cve" title="CVE-2024-11187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12705" id="CVE-2024-12705" type="cve" title="CVE-2024-12705"/>
      <reference href="https://bugzilla.redhat.com/2342879" id="2342879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2342880" id="2342880" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1670.html" id="ALSA-2025:1670" type="self" title="ALSA-2025:1670"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="bind9.18-devel" version="9.18.29" release="1.el9_5.1" epoch="32" arch="s390x" src="bind9.18-9.18.29-1.el9_5.1.src.rpm">
          <filename>bind9.18-devel-9.18.29-1.el9_5.1.s390x.rpm</filename>
          <sum type="sha256">54cb879e21320ce3195ac053652d317c670cfa77bdcdcd1c08e6ab585b4e1964</sum>
        </package>
        <package name="bind9.18-doc" version="9.18.29" release="1.el9_5.1" epoch="32" arch="noarch" src="bind9.18-9.18.29-1.el9_5.1.src.rpm">
          <filename>bind9.18-doc-9.18.29-1.el9_5.1.noarch.rpm</filename>
          <sum type="sha256">77c63238095876975f73c8eaaf24d184ac4b256cba65b144aebfaaff277235c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1671</id>
    <title>Important: mysql security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-02-20 14:55:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
  * krb5: GSS message token handling (CVE-2024-37371)
  * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
  * mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
  * mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
  * mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
  * mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
  * mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
  * mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
  * mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
  * mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
  * mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
  * mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
  * mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
  * curl: curl netrc password leak (CVE-2024-11053)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
  * mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
  * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  * mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
  * mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
  * mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
  * mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
  * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
  * mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
  * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
  * mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
  * mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1671" id="RHSA-2025:1671" type="rhsa" title="RHSA-2025:1671"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11053" id="CVE-2024-11053" type="cve" title="CVE-2024-11053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21193" id="CVE-2024-21193" type="cve" title="CVE-2024-21193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21194" id="CVE-2024-21194" type="cve" title="CVE-2024-21194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21196" id="CVE-2024-21196" type="cve" title="CVE-2024-21196"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21197" id="CVE-2024-21197" type="cve" title="CVE-2024-21197"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21198" id="CVE-2024-21198" type="cve" title="CVE-2024-21198"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21199" id="CVE-2024-21199" type="cve" title="CVE-2024-21199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21201" id="CVE-2024-21201" type="cve" title="CVE-2024-21201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21203" id="CVE-2024-21203" type="cve" title="CVE-2024-21203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21212" id="CVE-2024-21212" type="cve" title="CVE-2024-21212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21213" id="CVE-2024-21213" type="cve" title="CVE-2024-21213"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21218" id="CVE-2024-21218" type="cve" title="CVE-2024-21218"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21219" id="CVE-2024-21219" type="cve" title="CVE-2024-21219"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21230" id="CVE-2024-21230" type="cve" title="CVE-2024-21230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21231" id="CVE-2024-21231" type="cve" title="CVE-2024-21231"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21236" id="CVE-2024-21236" type="cve" title="CVE-2024-21236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21237" id="CVE-2024-21237" type="cve" title="CVE-2024-21237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21238" id="CVE-2024-21238" type="cve" title="CVE-2024-21238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21239" id="CVE-2024-21239" type="cve" title="CVE-2024-21239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21241" id="CVE-2024-21241" type="cve" title="CVE-2024-21241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21247" id="CVE-2024-21247" type="cve" title="CVE-2024-21247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37371" id="CVE-2024-37371" type="cve" title="CVE-2024-37371"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5535" id="CVE-2024-5535" type="cve" title="CVE-2024-5535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7264" id="CVE-2024-7264" type="cve" title="CVE-2024-7264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21490" id="CVE-2025-21490" type="cve" title="CVE-2025-21490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21491" id="CVE-2025-21491" type="cve" title="CVE-2025-21491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21494" id="CVE-2025-21494" type="cve" title="CVE-2025-21494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21497" id="CVE-2025-21497" type="cve" title="CVE-2025-21497"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21500" id="CVE-2025-21500" type="cve" title="CVE-2025-21500"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21501" id="CVE-2025-21501" type="cve" title="CVE-2025-21501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21503" id="CVE-2025-21503" type="cve" title="CVE-2025-21503"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21504" id="CVE-2025-21504" type="cve" title="CVE-2025-21504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21505" id="CVE-2025-21505" type="cve" title="CVE-2025-21505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21518" id="CVE-2025-21518" type="cve" title="CVE-2025-21518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21519" id="CVE-2025-21519" type="cve" title="CVE-2025-21519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21520" id="CVE-2025-21520" type="cve" title="CVE-2025-21520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21521" id="CVE-2025-21521" type="cve" title="CVE-2025-21521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21522" id="CVE-2025-21522" type="cve" title="CVE-2025-21522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21523" id="CVE-2025-21523" type="cve" title="CVE-2025-21523"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21525" id="CVE-2025-21525" type="cve" title="CVE-2025-21525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21529" id="CVE-2025-21529" type="cve" title="CVE-2025-21529"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21531" id="CVE-2025-21531" type="cve" title="CVE-2025-21531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21534" id="CVE-2025-21534" type="cve" title="CVE-2025-21534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21536" id="CVE-2025-21536" type="cve" title="CVE-2025-21536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21540" id="CVE-2025-21540" type="cve" title="CVE-2025-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21543" id="CVE-2025-21543" type="cve" title="CVE-2025-21543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21546" id="CVE-2025-21546" type="cve" title="CVE-2025-21546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21555" id="CVE-2025-21555" type="cve" title="CVE-2025-21555"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21559" id="CVE-2025-21559" type="cve" title="CVE-2025-21559"/>
      <reference href="https://bugzilla.redhat.com/2294581" id="2294581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294676" id="2294676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301888" id="2301888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318857" id="2318857" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318858" id="2318858" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318870" id="2318870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318873" id="2318873" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318874" id="2318874" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318876" id="2318876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318882" id="2318882" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318883" id="2318883" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318884" id="2318884" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318885" id="2318885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318886" id="2318886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318897" id="2318897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318900" id="2318900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318905" id="2318905" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318914" id="2318914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318922" id="2318922" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318923" id="2318923" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318925" id="2318925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318926" id="2318926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318927" id="2318927" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331191" id="2331191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339218" id="2339218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339220" id="2339220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339221" id="2339221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339226" id="2339226" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339231" id="2339231" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339236" id="2339236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339238" id="2339238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339243" id="2339243" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339247" id="2339247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339252" id="2339252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339259" id="2339259" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339266" id="2339266" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339270" id="2339270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339271" id="2339271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339275" id="2339275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339277" id="2339277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339281" id="2339281" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339284" id="2339284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339291" id="2339291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339293" id="2339293" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339295" id="2339295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339299" id="2339299" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339300" id="2339300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339304" id="2339304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339305" id="2339305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1671.html" id="ALSA-2025:1671" type="self" title="ALSA-2025:1671"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="mysql-libs" version="8.0.41" release="2.el9_5" epoch="0" arch="s390x" src="mysql-8.0.41-2.el9_5.src.rpm">
          <filename>mysql-libs-8.0.41-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">8f7a9dddd8f2fcf8c22892eb27f84efa83fdf2e77a299dc29042fe5c1c4624d2</sum>
        </package>
        <package name="mysql-devel" version="8.0.41" release="2.el9_5" epoch="0" arch="s390x" src="mysql-8.0.41-2.el9_5.src.rpm">
          <filename>mysql-devel-8.0.41-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">90fd07fc425021cc957eca019434f8207c813f473e1701547203d5f9f1bf7627</sum>
        </package>
        <package name="mysql-test" version="8.0.41" release="2.el9_5" epoch="0" arch="s390x" src="mysql-8.0.41-2.el9_5.src.rpm">
          <filename>mysql-test-8.0.41-2.el9_5.s390x.rpm</filename>
          <sum type="sha256">c6672b99ed1de9647f85ea0061d4f1c586dc715071ff9a0171e6be68b93d91c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1681</id>
    <title>Important: bind security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-02-20 12:03:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1681" id="RHSA-2025:1681" type="rhsa" title="RHSA-2025:1681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11187" id="CVE-2024-11187" type="cve" title="CVE-2024-11187"/>
      <reference href="https://bugzilla.redhat.com/2342879" id="2342879" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1681.html" id="ALSA-2025:1681" type="self" title="ALSA-2025:1681"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="bind-doc" version="9.16.23" release="24.el9_5.3" epoch="32" arch="noarch" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>bind-doc-9.16.23-24.el9_5.3.noarch.rpm</filename>
          <sum type="sha256">045097af79111a6f6690a054d83f198561c6696a82ba817f9b4b1ca59004895a</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="24.el9_5.3" epoch="32" arch="s390x" src="bind-9.16.23-24.el9_5.3.src.rpm">
          <filename>bind-devel-9.16.23-24.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">788f4bc1c749c6d3baf5015fb15cfeb33a9e560624da234266f7c6f20100e7c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16880</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-29 00:00:00"/>
    <updated date="2025-10-01 09:16:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472)
  * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527)
  * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)
  * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682)
  * kernel: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16880" id="RHSA-2025:16880" type="rhsa" title="RHSA-2025:16880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38472" id="CVE-2025-38472" type="cve" title="CVE-2025-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38527" id="CVE-2025-38527" type="cve" title="CVE-2025-38527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38718" id="CVE-2025-38718" type="cve" title="CVE-2025-38718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39682" id="CVE-2025-39682" type="cve" title="CVE-2025-39682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39698" id="CVE-2025-39698" type="cve" title="CVE-2025-39698"/>
      <reference href="https://bugzilla.redhat.com/2383916" id="2383916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388928" id="2388928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393166" id="2393166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393511" id="2393511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393519" id="2393519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16880.html" id="ALSA-2025:16880" type="self" title="ALSA-2025:16880"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5ce2ae4e28fd925b05986a62cef9b8d9f1f85ee3e2fd9a93823e1e4dbecc8d19</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.49.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">801990267da25449d0d73504d5ce37c8b23a1bae5f189b0f44acf7e0d24e29ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17084</id>
    <title>Important: ipa security update</title>
    <issued date="2025-09-30 00:00:00"/>
    <updated date="2025-10-22 13:14:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  

Security Fix(es):  

  * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17084" id="RHSA-2025:17084" type="rhsa" title="RHSA-2025:17084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7493" id="CVE-2025-7493" type="cve" title="CVE-2025-7493"/>
      <reference href="https://bugzilla.redhat.com/2389448" id="2389448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17084.html" id="ALSA-2025:17084" type="self" title="ALSA-2025:17084"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3-ipatests" version="4.12.2" release="14.el9_6.5" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.5.src.rpm">
          <filename>python3-ipatests-4.12.2-14.el9_6.5.noarch.rpm</filename>
          <sum type="sha256">f11bab0e5d897b89c5f9cda819ac846db881e4a46077033f48563660e1fc9dd3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17162</id>
    <title>Moderate: perl-JSON-XS security update</title>
    <issued date="2025-10-01 00:00:00"/>
    <updated date="2025-10-20 12:33:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl-JSON-XS security update</summary>
    <description>This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C.  

Security Fix(es):  

  * JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON (CVE-2025-40928)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17162" id="RHSA-2025:17162" type="rhsa" title="RHSA-2025:17162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40928" id="CVE-2025-40928" type="cve" title="CVE-2025-40928"/>
      <reference href="https://bugzilla.redhat.com/2393878" id="2393878" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17162.html" id="ALSA-2025:17162" type="self" title="ALSA-2025:17162"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="perl-JSON-XS" version="4.04" release="1.el9_6" epoch="1" arch="s390x" src="perl-JSON-XS-4.04-1.el9_6.src.rpm">
          <filename>perl-JSON-XS-4.04-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d056e770be417a357ebf9549b36c656782e6d73be2e25fd9923ce55cf8b58717</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17377</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-06 00:00:00"/>
    <updated date="2025-10-09 07:41:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301)
  * kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CVE-2025-38351)
  * kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling (CVE-2025-39761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17377" id="RHSA-2025:17377" type="rhsa" title="RHSA-2025:17377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50301" id="CVE-2024-50301" type="cve" title="CVE-2024-50301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38351" id="CVE-2025-38351" type="cve" title="CVE-2025-38351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39761" id="CVE-2025-39761" type="cve" title="CVE-2025-39761"/>
      <reference href="https://bugzilla.redhat.com/2327188" id="2327188" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382059" id="2382059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394606" id="2394606" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17377.html" id="ALSA-2025:17377" type="self" title="ALSA-2025:17377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libperf" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7eadbdacaa4f9e7330a08bf724f214c44de69ffa46b4f597afb4e454d364d758</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.51.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">ef814d5810bb9d5be2bf77f7aad211ff2f5170ebe7e8fa85a9852839467dc612</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1742</id>
    <title>Important: postgresql security update</title>
    <issued date="2025-02-20 00:00:00"/>
    <updated date="2025-02-21 13:11:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1742" id="RHSA-2025:1742" type="rhsa" title="RHSA-2025:1742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-1094" id="CVE-2025-1094" type="cve" title="CVE-2025-1094"/>
      <reference href="https://bugzilla.redhat.com/2345548" id="2345548" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1742.html" id="ALSA-2025:1742" type="self" title="ALSA-2025:1742"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="postgresql-test" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-test-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">0d20f4ad44a64133e839c69b7a95e385088dbdc77cb31e2f81f07dd0c3730d7d</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.20" release="1.el9_5" epoch="0" arch="noarch" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-test-rpm-macros-13.20-1.el9_5.noarch.rpm</filename>
          <sum type="sha256">167bf6673ce0e88f70019e49d0937948c321511b6c62d9f015003e4796450bab</sum>
        </package>
        <package name="postgresql-server-devel" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-server-devel-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">1998451b163ab480e0c8322f85404a910f6e619bdf14a95b4ece4e2d2c587464</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-upgrade-devel-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">6204d119043755765a78da4ffb59c85a5c67192638ef1395452ed4f32f8cdb54</sum>
        </package>
        <package name="postgresql-static" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-static-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">aef96008fc92852f792c83f3200c6407983e9724bfecaaeaea062a1e39815a5f</sum>
        </package>
        <package name="postgresql-docs" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-docs-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bf3f5bb8d1410d7696cc9bc5dc680c89ebed209feffdea624448d91a7591fa80</sum>
        </package>
        <package name="postgresql-private-devel" version="13.20" release="1.el9_5" epoch="0" arch="s390x" src="postgresql-13.20-1.el9_5.src.rpm">
          <filename>postgresql-private-devel-13.20-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">d2d00b63a6c6fbeb748c4881af836444a52a553466d761e485b8a74b6f927de6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17760</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-13 00:00:00"/>
    <updated date="2025-10-16 07:32:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556)
  * kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614)
  * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757)
  * kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17760" id="RHSA-2025:17760" type="rhsa" title="RHSA-2025:17760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53373" id="CVE-2023-53373" type="cve" title="CVE-2023-53373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38556" id="CVE-2025-38556" type="cve" title="CVE-2025-38556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38614" id="CVE-2025-38614" type="cve" title="CVE-2025-38614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39757" id="CVE-2025-39757" type="cve" title="CVE-2025-39757"/>
      <reference href="https://bugzilla.redhat.com/2389456" id="2389456" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389491" id="2389491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394615" id="2394615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396379" id="2396379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17760.html" id="ALSA-2025:17760" type="self" title="ALSA-2025:17760"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5f9833ae1b60df6013155bcfc482419daa35d5289e1dab277e4fcaf7f79ebf8e</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.52.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">dfca77359817bf8b7ed84d9e80d6cfd06fb936dca29d890ae3785953edd255f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18149</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-10-20 12:28:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime 8.0.21.Security Fix(es):  

  * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
  * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18149" id="RHSA-2025:18149" type="rhsa" title="RHSA-2025:18149"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315"/>
      <reference href="https://bugzilla.redhat.com/2403083" id="2403083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403085" id="2403085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403086" id="2403086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18149.html" id="ALSA-2025:18149" type="self" title="ALSA-2025:18149"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.121" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el9_6.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.121-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">9a46dc2501c00ebca3bf430dce1317702fd5c3cf9a3764b3078d7ed160953b5a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18151</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-11-03 08:48:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.111 and .NET Runtime 9.0.10.Security Fix(es):  

  * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
  * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18151" id="RHSA-2025:18151" type="rhsa" title="RHSA-2025:18151"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315"/>
      <reference href="https://bugzilla.redhat.com/2403083" id="2403083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403085" id="2403085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403086" id="2403086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18151.html" id="ALSA-2025:18151" type="self" title="ALSA-2025:18151"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.111" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el9_6.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.111-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4d2b20f7d000ca8eed818b7550c917300d533352bb87a4b35176f066ded59d42</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18281</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-20 00:00:00"/>
    <updated date="2025-10-22 10:16:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)
  * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)
  * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571)
  * kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566)
  * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)
  * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849)
  * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18281" id="RHSA-2025:18281" type="rhsa" title="RHSA-2025:18281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50087" id="CVE-2022-50087" type="cve" title="CVE-2022-50087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22026" id="CVE-2025-22026" type="cve" title="CVE-2025-22026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38566" id="CVE-2025-38566" type="cve" title="CVE-2025-38566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38571" id="CVE-2025-38571" type="cve" title="CVE-2025-38571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39817" id="CVE-2025-39817" type="cve" title="CVE-2025-39817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39841" id="CVE-2025-39841" type="cve" title="CVE-2025-39841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39849" id="CVE-2025-39849" type="cve" title="CVE-2025-39849"/>
      <reference href="https://bugzilla.redhat.com/2360224" id="2360224" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373539" id="2373539" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389480" id="2389480" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389487" id="2389487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395805" id="2395805" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396928" id="2396928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396944" id="2396944" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18281.html" id="ALSA-2025:18281" type="self" title="ALSA-2025:18281"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">57c52e3270f948e4e5086843234289d87716cb7b7e6780939830e2ec5bbd0b2d</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.55.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7dfefb6293fe40f0e74ace02a3c6f4269a60d766ddb9f8797c117289515e15ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18821</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 07:23:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)


Bug Fix(es):  

  * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 17 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.4, 8.6 and 9.0 (AlmaLinux-118788, AlmaLinux-118789, AlmaLinux-118792)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18821" id="RHSA-2025:18821" type="rhsa" title="RHSA-2025:18821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18821.html" id="ALSA-2025:18821" type="self" title="ALSA-2025:18821"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0dcbccf26be10d2cb21753e82e950a0c9c05e7f87f737e276a559cb48a3c8abb</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0e13a1e79fafc9463a476a1b7a49d35df99b17e181cc8cdc172d7add48d7aa92</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">5259c02a046f5d0c14257363c8bd30ea814b757bbd6e6cd866240657496ba9f6</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">58d137b103c73441b6dec0a1b404ec0c03f9b4261a6efa4f2c0b3fe9da5b6f60</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c25eb4655dc22721ace04bd331f5491c25ce243fa40193600961241ea2b6fc03</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d76b88c02540e8a4c5912c534ba7922a7b88741dbfc02ee860a67ebe70d77232</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.17.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.17.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f6a0c6b4fac14e4a967e69598bb7896cde1f4b8be3b7a60ac59b4ecf4b5c4195</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18824</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 07:10:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)
  * JDK: Enhance String Handling (CVE-2025-61748)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18824" id="RHSA-2025:18824" type="rhsa" title="RHSA-2025:18824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61748" id="CVE-2025-61748" type="cve" title="CVE-2025-61748"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18824.html" id="ALSA-2025:18824" type="self" title="ALSA-2025:18824"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">52532e6a3b3c0301717b69b5691f34297df14ecf8f9335d17a5747ed172b26d7</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">849d3c712a69c9b3e94f43e4b863cfcade43507ff3bc5539a6c042c9b7874f46</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">8798b48ece81ea4768bc66387263cef486fc005146db8aae4b6741c030fed38f</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">8e590de8bb481eab31e08a8c404d1fe001a5a1b369ad13397cb217ca898d1d39</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b50b8ab957eef96ba2984997da20ca42afe6449c6d50dcba4a105d179d7aa2d1</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">bd40a9d6ddb4f25b1a7f382a0fcfbb736a98e8cb88ec55bbbfad3c7d5dc8ba51</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.9.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.9.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f235f2b2d734a913f34c8eb5136d0a9f16cc1c38d94e2f1ddc7df60444128d1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19113</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-10-27 00:00:00"/>
    <updated date="2025-10-28 07:58:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)
  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19113" id="RHSA-2025:19113" type="rhsa" title="RHSA-2025:19113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8176" id="CVE-2025-8176" type="cve" title="CVE-2025-8176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2383598" id="2383598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19113.html" id="ALSA-2025:19113" type="self" title="ALSA-2025:19113"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libtiff-tools" version="4.4.0" release="13.el9_6.2" epoch="0" arch="s390x" src="libtiff-4.4.0-13.el9_6.2.src.rpm">
          <filename>libtiff-tools-4.4.0-13.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">f85f45a91695c5daa6ca3e4717c53493d960273168d482b220efbe86a24e9fb9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19409</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-03 00:00:00"/>
    <updated date="2025-11-07 11:49:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702)
  * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367)
  * kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19409" id="RHSA-2025:19409" type="rhsa" title="RHSA-2025:19409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50367" id="CVE-2022-50367" type="cve" title="CVE-2022-50367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53494" id="CVE-2023-53494" type="cve" title="CVE-2023-53494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39702" id="CVE-2025-39702" type="cve" title="CVE-2025-39702"/>
      <reference href="https://bugzilla.redhat.com/2393533" id="2393533" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396114" id="2396114" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400777" id="2400777" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19409.html" id="ALSA-2025:19409" type="self" title="ALSA-2025:19409"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7b363e47aacf69ea6ee1bc9cdf79cad3b2a43e674b4f47c11da42ba9d142d81b</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.60.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">9f1c01514be5ed09f71301301f83f794ee2ab6e6637cf8a6646643d47605b2df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19584</id>
    <title>Moderate: galera and mariadb security update</title>
    <issued date="2025-11-04 00:00:00"/>
    <updated date="2025-11-07 09:34:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>galera and mariadb security update</summary>
    <description>Galera is a fast synchronous multimaster wsrep provider (replication engine) for transactional databases and similar applications. For more information about wsrep API see &lt;https://github.com/codership/wsrep-API&gt; repository. For a description of Galera replication engine see &lt;https://www.galeracluster.com&gt; web.  

Security Fix(es):  

  * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
  * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19584" id="RHSA-2025:19584" type="rhsa" title="RHSA-2025:19584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52969" id="CVE-2023-52969" type="cve" title="CVE-2023-52969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52970" id="CVE-2023-52970" type="cve" title="CVE-2023-52970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21490" id="CVE-2025-21490" type="cve" title="CVE-2025-21490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30693" id="CVE-2025-30693" type="cve" title="CVE-2025-30693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30722" id="CVE-2025-30722" type="cve" title="CVE-2025-30722"/>
      <reference href="https://bugzilla.redhat.com/2339221" id="2339221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350916" id="2350916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350918" id="2350918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359885" id="2359885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359963" id="2359963" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19584.html" id="ALSA-2025:19584" type="self" title="ALSA-2025:19584"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="mariadb-test" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-test-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">173c731868e4aa50cc1d743d2aa7817ed15cc3881b2966ce94d5f29c71da5557</sum>
        </package>
        <package name="mariadb-devel" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-devel-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">5b77b3b55a423c98dba5ec728644ca4f85658e7e437965a9adc91134d4969210</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.5.29" release="2.el9_6" epoch="3" arch="s390x" src="mariadb-10.5.29-2.el9_6.src.rpm">
          <filename>mariadb-embedded-devel-10.5.29-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">eac2eae1ad852228c5740a93ff6576e1cbf00fddacf62a860fb777b7d0c918c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19930</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-10 00:00:00"/>
    <updated date="2025-11-12 09:53:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19930" id="RHSA-2025:19930" type="rhsa" title="RHSA-2025:19930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36350" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36357" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40300" id="CVE-2025-40300" type="cve" title="CVE-2025-40300"/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394627" id="2394627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19930.html" id="ALSA-2025:19930" type="self" title="ALSA-2025:19930"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">837c72c9bee4678a9987e133e2ab2effee2079c5319870201db5da13399b9efa</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.62.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">94653d643987abdc7fcec3e426efab48ad4c6f270e3c6d219c96a8ad69a66233</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19950</id>
    <title>Important: bind9.18 security update</title>
    <issued date="2025-11-10 00:00:00"/>
    <updated date="2025-11-19 09:11:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.18 security update</summary>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19950" id="RHSA-2025:19950" type="rhsa" title="RHSA-2025:19950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8677" id="CVE-2025-8677" type="cve" title="CVE-2025-8677"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405830" id="2405830" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19950.html" id="ALSA-2025:19950" type="self" title="ALSA-2025:19950"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="bind9.18-devel" version="9.18.29" release="4.el9_6.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-4.el9_6.2.src.rpm">
          <filename>bind9.18-devel-9.18.29-4.el9_6.2.s390x.rpm</filename>
          <sum type="sha256">078d9155080db8f68c8c9cbef17797bb0094c9445a0ae15828a65853f4e37cb5</sum>
        </package>
        <package name="bind9.18-doc" version="9.18.29" release="4.el9_6.2" epoch="32" arch="noarch" src="bind9.18-9.18.29-4.el9_6.2.src.rpm">
          <filename>bind9.18-doc-9.18.29-4.el9_6.2.noarch.rpm</filename>
          <sum type="sha256">96d3c97bb463ee4e457f2ba7e81f71eac1d9181a66f082476952e3305244b877</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20518</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:15:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)
  * kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)
  * kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)
  * kernel: vfs: fix race between evice_inodes() and find_inode()&amp;#38;iput() (CVE-2024-47679)
  * kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
  * kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)
  * kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)
  * kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)
  * kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)
  * kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)
  * kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)
  * kernel: afs: Fix lock recursion (CVE-2024-53090)
  * kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)
  * kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)
  * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  * kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)
  * kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)
  * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
  * kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)
  * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
  * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  * kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)
  * kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)
  * kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)
  * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  * kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)
  * kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)
  * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  * kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)
  * kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  * kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)
  * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  * kernel: pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0 (CVE-2025-21702)
  * kernel: usbnet: fix memory leak in error case (CVE-2022-49657)
  * kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)
  * kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)
  * kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)
  * kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)
  * kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
  * kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)
  * kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269)
  * kernel: ima: Fix a potential integer overflow in ima_appraise_measurement (CVE-2022-49643)
  * kernel: powerpc/xive/spapr: correct bitmap allocation size (CVE-2022-49623)
  * kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CVE-2022-49357)
  * kernel: list: fix a data-race around ep-&gt;rdllist (CVE-2022-49443)
  * kernel: tracing/histograms: Fix memory leak problem (CVE-2022-49648)
  * kernel: Input: synaptics - fix crash when enabling pass-through port (CVE-2025-21746)
  * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  * kernel: bpf: Send signals asynchronously if !preemptible (CVE-2025-21728)
  * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  * kernel: RDMA/mlx5: Fix implicit ODP use after free (CVE-2025-21714)
  * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  * kernel: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (CVE-2024-57993)
  * kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (CVE-2025-21729)
  * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  * kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq() (CVE-2024-57998)
  * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  * kernel: scsi: ufs: core: Fix use-after free in init error and remove paths (CVE-2025-21739)
  * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  * kernel: team: better TEAM_OPTION_TYPE_STRING validation (CVE-2025-21787)
  * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981)
  * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790)
  * kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (CVE-2024-57990)
  * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765)
  * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012)
  * kernel: blk-cgroup: Fix class @block_class's subsystem refcount leakage (CVE-2025-21745)
  * kernel: net: let net.core.dev_weight always be non-zero (CVE-2025-21806)
  * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072)
  * kernel: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (CVE-2024-58068)
  * kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference (CVE-2024-58062)
  * kernel: idpf: convert workqueues to unbound (CVE-2024-58057)
  * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828)
  * kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083)
  * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826)
  * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077)
  * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075)
  * kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (CVE-2025-21829)
  * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839)
  * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837)
  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851)
  * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855)
  * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844)
  * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853)
  * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847)
  * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864)
  * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088)
  * kernel: acct: perform last write from workqueue (CVE-2025-21846)
  * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861)
  * kernel: io_uring: prevent opcode speculation (CVE-2025-21863)
  * kernel: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CVE-2025-21848)
  * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056)
  * kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization (CVE-2022-49845)
  * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994)
  * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116)
  * kernel: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (CVE-2025-38396)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20518" id="RHSA-2025:20518" type="rhsa" title="RHSA-2025:20518"/>
      <reference href="https://bugzilla.redhat.com/2298169" id="2298169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312077" id="2312077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2313092" id="2313092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320172" id="2320172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320259" id="2320259" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320455" id="2320455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320616" id="2320616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320722" id="2320722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324549" id="2324549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327203" id="2327203" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327374" id="2327374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327887" id="2327887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329918" id="2329918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2330341" id="2330341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331326" id="2331326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334357" id="2334357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334396" id="2334396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334415" id="2334415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334439" id="2334439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334537" id="2334537" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334547" id="2334547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334548" id="2334548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334560" id="2334560" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334676" id="2334676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334795" id="2334795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334829" id="2334829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336541" id="2336541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337121" id="2337121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337124" id="2337124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338814" id="2338814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338828" id="2338828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338832" id="2338832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343172" id="2343172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343175" id="2343175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344684" id="2344684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344687" id="2344687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345240" id="2345240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346272" id="2346272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347707" id="2347707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347753" id="2347753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347759" id="2347759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347781" id="2347781" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347807" id="2347807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347859" id="2347859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347919" id="2347919" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347968" id="2347968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348022" id="2348022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348071" id="2348071" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348238" id="2348238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348240" id="2348240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348279" id="2348279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348515" id="2348515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348523" id="2348523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348528" id="2348528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348541" id="2348541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348543" id="2348543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348547" id="2348547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348550" id="2348550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348554" id="2348554" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348556" id="2348556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348566" id="2348566" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348573" id="2348573" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348574" id="2348574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348577" id="2348577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348578" id="2348578" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348581" id="2348581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348584" id="2348584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348585" id="2348585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348587" id="2348587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348595" id="2348595" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348597" id="2348597" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348600" id="2348600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348601" id="2348601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348615" id="2348615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348620" id="2348620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348625" id="2348625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348634" id="2348634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348645" id="2348645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348650" id="2348650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348654" id="2348654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348901" id="2348901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350363" id="2350363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350367" id="2350367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350374" id="2350374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350375" id="2350375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350386" id="2350386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350388" id="2350388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350392" id="2350392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350396" id="2350396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350397" id="2350397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350400" id="2350400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350585" id="2350585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350589" id="2350589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351606" id="2351606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351608" id="2351608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351612" id="2351612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351613" id="2351613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351616" id="2351616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351618" id="2351618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351620" id="2351620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351624" id="2351624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351625" id="2351625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351629" id="2351629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351633" id="2351633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360215" id="2360215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363380" id="2363380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369184" id="2369184" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376076" id="2376076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383441" id="2383441" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20518.html" id="ALSA-2025:20518" type="self" title="ALSA-2025:20518"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-48830.html" id="CVE-2022-48830" type="cve" title="CVE-2022-48830"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49024.html" id="CVE-2022-49024" type="cve" title="CVE-2022-49024"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49269.html" id="CVE-2022-49269" type="cve" title="CVE-2022-49269"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49353.html" id="CVE-2022-49353" type="cve" title="CVE-2022-49353"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49357.html" id="CVE-2022-49357" type="cve" title="CVE-2022-49357"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49432.html" id="CVE-2022-49432" type="cve" title="CVE-2022-49432"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49437.html" id="CVE-2022-49437" type="cve" title="CVE-2022-49437"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49443.html" id="CVE-2022-49443" type="cve" title="CVE-2022-49443"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49623.html" id="CVE-2022-49623" type="cve" title="CVE-2022-49623"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49627.html" id="CVE-2022-49627" type="cve" title="CVE-2022-49627"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49643.html" id="CVE-2022-49643" type="cve" title="CVE-2022-49643"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49648.html" id="CVE-2022-49648" type="cve" title="CVE-2022-49648"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49657.html" id="CVE-2022-49657" type="cve" title="CVE-2022-49657"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49670.html" id="CVE-2022-49670" type="cve" title="CVE-2022-49670"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49672.html" id="CVE-2022-49672" type="cve" title="CVE-2022-49672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49845.html" id="CVE-2022-49845" type="cve" title="CVE-2022-49845"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-36350.html" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-36357.html" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-46689.html" id="CVE-2024-46689" type="cve" title="CVE-2024-46689"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-46744.html" id="CVE-2024-46744" type="cve" title="CVE-2024-46744"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-47679.html" id="CVE-2024-47679" type="cve" title="CVE-2024-47679"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-47727.html" id="CVE-2024-47727" type="cve" title="CVE-2024-47727"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-49570.html" id="CVE-2024-49570" type="cve" title="CVE-2024-49570"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-49864.html" id="CVE-2024-49864" type="cve" title="CVE-2024-49864"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50060.html" id="CVE-2024-50060" type="cve" title="CVE-2024-50060"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50195.html" id="CVE-2024-50195" type="cve" title="CVE-2024-50195"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50294.html" id="CVE-2024-50294" type="cve" title="CVE-2024-50294"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-52332.html" id="CVE-2024-52332" type="cve" title="CVE-2024-52332"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53052.html" id="CVE-2024-53052" type="cve" title="CVE-2024-53052"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53090.html" id="CVE-2024-53090" type="cve" title="CVE-2024-53090"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53119.html" id="CVE-2024-53119" type="cve" title="CVE-2024-53119"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53135.html" id="CVE-2024-53135" type="cve" title="CVE-2024-53135"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53170.html" id="CVE-2024-53170" type="cve" title="CVE-2024-53170"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53216.html" id="CVE-2024-53216" type="cve" title="CVE-2024-53216"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53229.html" id="CVE-2024-53229" type="cve" title="CVE-2024-53229"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53241.html" id="CVE-2024-53241" type="cve" title="CVE-2024-53241"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53680.html" id="CVE-2024-53680" type="cve" title="CVE-2024-53680"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-54456.html" id="CVE-2024-54456" type="cve" title="CVE-2024-54456"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56603.html" id="CVE-2024-56603" type="cve" title="CVE-2024-56603"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56645.html" id="CVE-2024-56645" type="cve" title="CVE-2024-56645"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56662.html" id="CVE-2024-56662" type="cve" title="CVE-2024-56662"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56672.html" id="CVE-2024-56672" type="cve" title="CVE-2024-56672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56675.html" id="CVE-2024-56675" type="cve" title="CVE-2024-56675"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56690.html" id="CVE-2024-56690" type="cve" title="CVE-2024-56690"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56709.html" id="CVE-2024-56709" type="cve" title="CVE-2024-56709"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56739.html" id="CVE-2024-56739" type="cve" title="CVE-2024-56739"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56786.html" id="CVE-2024-56786" type="cve" title="CVE-2024-56786"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57981.html" id="CVE-2024-57981" type="cve" title="CVE-2024-57981"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57986.html" id="CVE-2024-57986" type="cve" title="CVE-2024-57986"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57987.html" id="CVE-2024-57987" type="cve" title="CVE-2024-57987"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57988.html" id="CVE-2024-57988" type="cve" title="CVE-2024-57988"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57989.html" id="CVE-2024-57989" type="cve" title="CVE-2024-57989"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57990.html" id="CVE-2024-57990" type="cve" title="CVE-2024-57990"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57993.html" id="CVE-2024-57993" type="cve" title="CVE-2024-57993"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57995.html" id="CVE-2024-57995" type="cve" title="CVE-2024-57995"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57998.html" id="CVE-2024-57998" type="cve" title="CVE-2024-57998"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58012.html" id="CVE-2024-58012" type="cve" title="CVE-2024-58012"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58014.html" id="CVE-2024-58014" type="cve" title="CVE-2024-58014"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58015.html" id="CVE-2024-58015" type="cve" title="CVE-2024-58015"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58057.html" id="CVE-2024-58057" type="cve" title="CVE-2024-58057"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58062.html" id="CVE-2024-58062" type="cve" title="CVE-2024-58062"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58068.html" id="CVE-2024-58068" type="cve" title="CVE-2024-58068"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58072.html" id="CVE-2024-58072" type="cve" title="CVE-2024-58072"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58075.html" id="CVE-2024-58075" type="cve" title="CVE-2024-58075"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58077.html" id="CVE-2024-58077" type="cve" title="CVE-2024-58077"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58083.html" id="CVE-2024-58083" type="cve" title="CVE-2024-58083"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58088.html" id="CVE-2024-58088" type="cve" title="CVE-2024-58088"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21631.html" id="CVE-2025-21631" type="cve" title="CVE-2025-21631"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21647.html" id="CVE-2025-21647" type="cve" title="CVE-2025-21647"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21648.html" id="CVE-2025-21648" type="cve" title="CVE-2025-21648"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21671.html" id="CVE-2025-21671" type="cve" title="CVE-2025-21671"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21672.html" id="CVE-2025-21672" type="cve" title="CVE-2025-21672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21691.html" id="CVE-2025-21691" type="cve" title="CVE-2025-21691"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21693.html" id="CVE-2025-21693" type="cve" title="CVE-2025-21693"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21696.html" id="CVE-2025-21696" type="cve" title="CVE-2025-21696"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21702.html" id="CVE-2025-21702" type="cve" title="CVE-2025-21702"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21714.html" id="CVE-2025-21714" type="cve" title="CVE-2025-21714"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21726.html" id="CVE-2025-21726" type="cve" title="CVE-2025-21726"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21728.html" id="CVE-2025-21728" type="cve" title="CVE-2025-21728"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21729.html" id="CVE-2025-21729" type="cve" title="CVE-2025-21729"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21738.html" id="CVE-2025-21738" type="cve" title="CVE-2025-21738"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21739.html" id="CVE-2025-21739" type="cve" title="CVE-2025-21739"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21745.html" id="CVE-2025-21745" type="cve" title="CVE-2025-21745"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21746.html" id="CVE-2025-21746" type="cve" title="CVE-2025-21746"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21765.html" id="CVE-2025-21765" type="cve" title="CVE-2025-21765"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21786.html" id="CVE-2025-21786" type="cve" title="CVE-2025-21786"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21787.html" id="CVE-2025-21787" type="cve" title="CVE-2025-21787"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21790.html" id="CVE-2025-21790" type="cve" title="CVE-2025-21790"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21791.html" id="CVE-2025-21791" type="cve" title="CVE-2025-21791"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21795.html" id="CVE-2025-21795" type="cve" title="CVE-2025-21795"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21796.html" id="CVE-2025-21796" type="cve" title="CVE-2025-21796"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21806.html" id="CVE-2025-21806" type="cve" title="CVE-2025-21806"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21826.html" id="CVE-2025-21826" type="cve" title="CVE-2025-21826"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21828.html" id="CVE-2025-21828" type="cve" title="CVE-2025-21828"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21829.html" id="CVE-2025-21829" type="cve" title="CVE-2025-21829"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21837.html" id="CVE-2025-21837" type="cve" title="CVE-2025-21837"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21839.html" id="CVE-2025-21839" type="cve" title="CVE-2025-21839"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21844.html" id="CVE-2025-21844" type="cve" title="CVE-2025-21844"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21846.html" id="CVE-2025-21846" type="cve" title="CVE-2025-21846"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21847.html" id="CVE-2025-21847" type="cve" title="CVE-2025-21847"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21848.html" id="CVE-2025-21848" type="cve" title="CVE-2025-21848"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21851.html" id="CVE-2025-21851" type="cve" title="CVE-2025-21851"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21853.html" id="CVE-2025-21853" type="cve" title="CVE-2025-21853"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21855.html" id="CVE-2025-21855" type="cve" title="CVE-2025-21855"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21861.html" id="CVE-2025-21861" type="cve" title="CVE-2025-21861"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21863.html" id="CVE-2025-21863" type="cve" title="CVE-2025-21863"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21864.html" id="CVE-2025-21864" type="cve" title="CVE-2025-21864"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-22056.html" id="CVE-2025-22056" type="cve" title="CVE-2025-22056"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-22097.html" id="CVE-2025-22097" type="cve" title="CVE-2025-22097"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-37994.html" id="CVE-2025-37994" type="cve" title="CVE-2025-37994"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38116.html" id="CVE-2025-38116" type="cve" title="CVE-2025-38116"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38396.html" id="CVE-2025-38396" type="cve" title="CVE-2025-38396"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1b486f3a95a6032db4f07c97ef7580605e926b85b33a2da0c2bafa1b6fd04e41</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">5d40d13c2f64572883bd389dbc02e9625f97e78144c3a2748188d7ae22bbe20a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20559</id>
    <title>Low: shadow-utils security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:19:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>shadow-utils security update</summary>
    <description>The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts.   

Security Fix(es):  

  * shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise (CVE-2024-56433)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20559" id="RHSA-2025:20559" type="rhsa" title="RHSA-2025:20559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56433" id="CVE-2024-56433" type="cve" title="CVE-2024-56433"/>
      <reference href="https://bugzilla.redhat.com/2334165" id="2334165" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20559.html" id="ALSA-2025:20559" type="self" title="ALSA-2025:20559"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="shadow-utils-subid-devel" version="4.9" release="15.el9" epoch="2" arch="s390x" src="shadow-utils-4.9-15.el9.src.rpm">
          <filename>shadow-utils-subid-devel-4.9-15.el9.s390x.rpm</filename>
          <sum type="sha256">5141eb7092e1798977abdfd56fe5930159572413f0bf712b48be604faec6f61d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20838</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:20:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zziplib security update</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.  

Security Fix(es):  

  * zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20838" id="RHSA-2025:20838" type="rhsa" title="RHSA-2025:20838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2018-17828" id="CVE-2018-17828" type="cve" title="CVE-2018-17828"/>
      <reference href="https://bugzilla.redhat.com/1635888" id="1635888" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20838.html" id="ALSA-2025:20838" type="self" title="ALSA-2025:20838"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="zziplib-devel" version="0.13.71" release="12.el9" epoch="0" arch="s390x" src="zziplib-0.13.71-12.el9.src.rpm">
          <filename>zziplib-devel-0.13.71-12.el9.s390x.rpm</filename>
          <sum type="sha256">e32da0c0d2bca4a27c805a3da528195c905ef317bc97bd8611187d63be8019df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20928</id>
    <title>Important: ipa security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-01 08:16:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  

Security Fix(es):  

  * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20928" id="RHSA-2025:20928" type="rhsa" title="RHSA-2025:20928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7493" id="CVE-2025-7493" type="cve" title="CVE-2025-7493"/>
      <reference href="https://bugzilla.redhat.com/2389448" id="2389448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20928.html" id="ALSA-2025:20928" type="self" title="ALSA-2025:20928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3-ipatests" version="4.12.2" release="22.el9_7.1" epoch="0" arch="noarch" src="ipa-4.12.2-22.el9_7.1.src.rpm">
          <filename>python3-ipatests-4.12.2-22.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">73735cb3f9e7836a82214b31eebc711a3dab45d846b482e539c88ccd41cc2083</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20954</id>
    <title>Important: sssd security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-01 08:12:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.  

Security Fix(es):  

  * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20954" id="RHSA-2025:20954" type="rhsa" title="RHSA-2025:20954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11561" id="CVE-2025-11561" type="cve" title="CVE-2025-11561"/>
      <reference href="https://bugzilla.redhat.com/2402727" id="2402727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20954.html" id="ALSA-2025:20954" type="self" title="ALSA-2025:20954"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libsss_nss_idmap-devel" version="2.9.7" release="4.el9_7.1" epoch="0" arch="s390x" src="sssd-2.9.7-4.el9_7.1.src.rpm">
          <filename>libsss_nss_idmap-devel-2.9.7-4.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">a2cc253155ee20420e1a9ebe8b75468d4bfbc7a7ba108b1bdf666fb411df68f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20956</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:30:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)
  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20956" id="RHSA-2025:20956" type="rhsa" title="RHSA-2025:20956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8176" id="CVE-2025-8176" type="cve" title="CVE-2025-8176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2383598" id="2383598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20956.html" id="ALSA-2025:20956" type="self" title="ALSA-2025:20956"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libtiff-tools" version="4.4.0" release="15.el9_7.2" epoch="0" arch="s390x" src="libtiff-4.4.0-15.el9_7.2.src.rpm">
          <filename>libtiff-tools-4.4.0-15.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">38c00b462f108f99317be9cf5c3407e7c4817fd29dba1173e4908405c70821ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20960</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:34:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20960" id="RHSA-2025:20960" type="rhsa" title="RHSA-2025:20960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20960.html" id="ALSA-2025:20960" type="self" title="ALSA-2025:20960"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="xorg-x11-server-Xwayland-devel" version="23.2.7" release="5.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-23.2.7-5.el9_7.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-23.2.7-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">6a3ca00bc23b9e69ce9f69e2eb3a81d75c0b636c48f877dbe81b8b83aed4f65c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20961</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:36:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20961" id="RHSA-2025:20961" type="rhsa" title="RHSA-2025:20961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20961.html" id="ALSA-2025:20961" type="self" title="ALSA-2025:20961"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="32.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-32.el9_7.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-32.el9_7.s390x.rpm</filename>
          <sum type="sha256">480f943c729608f0e9b98e9837df277437d1a7312bc23abf22300ef1236f619c</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="32.el9_7" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-32.el9_7.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-32.el9_7.noarch.rpm</filename>
          <sum type="sha256">95e1253a06af7d378305502d5dbb69dbe4f15e3169d304ac2956aa023e59f083</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21110</id>
    <title>Important: bind security update</title>
    <issued date="2025-11-12 00:00:00"/>
    <updated date="2025-11-19 09:39:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21110" id="RHSA-2025:21110" type="rhsa" title="RHSA-2025:21110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21110.html" id="ALSA-2025:21110" type="self" title="ALSA-2025:21110"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="bind-devel" version="9.16.23" release="34.el9_7.1" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.1.src.rpm">
          <filename>bind-devel-9.16.23-34.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">5c46a42bdb388b89563173cd7719180f9aa32827fb4e00e4e3bfcc0e2fe91eea</sum>
        </package>
        <package name="bind-doc" version="9.16.23" release="34.el9_7.1" epoch="32" arch="noarch" src="bind-9.16.23-34.el9_7.1.src.rpm">
          <filename>bind-doc-9.16.23-34.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">d5fe5e92ce924c40cfb8e5ffee39962cc0864de759ade57a74b9aeafe5b15352</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21111</id>
    <title>Important: bind9.18 security update</title>
    <issued date="2025-11-12 00:00:00"/>
    <updated date="2025-12-01 08:06:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.18 security update</summary>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21111" id="RHSA-2025:21111" type="rhsa" title="RHSA-2025:21111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8677" id="CVE-2025-8677" type="cve" title="CVE-2025-8677"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405830" id="2405830" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21111.html" id="ALSA-2025:21111" type="self" title="ALSA-2025:21111"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="bind9.18-devel" version="9.18.29" release="5.el9_7.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.2.src.rpm">
          <filename>bind9.18-devel-9.18.29-5.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">3cdcf0fe72bee7ded0c13aa536124743b411c2e6cc741f0734ed644900bfb3f7</sum>
        </package>
        <package name="bind9.18-doc" version="9.18.29" release="5.el9_7.2" epoch="32" arch="noarch" src="bind9.18-9.18.29-5.el9_7.2.src.rpm">
          <filename>bind9.18-doc-9.18.29-5.el9_7.2.noarch.rpm</filename>
          <sum type="sha256">3e89b39addd198c4c8835a6dd4053f4cd2690e3e639cf581ebcd64478a751bd8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21462</id>
    <title>Critical: lasso security update</title>
    <issued date="2025-11-17 00:00:00"/>
    <updated date="2025-11-19 09:40:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>lasso security update</summary>
    <description>The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.  

Security Fix(es):  

  * lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21462" id="RHSA-2025:21462" type="rhsa" title="RHSA-2025:21462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47151" id="CVE-2025-47151" type="cve" title="CVE-2025-47151"/>
      <reference href="https://bugzilla.redhat.com/2412739" id="2412739" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-21462.html" id="ALSA-2025:21462" type="self" title="ALSA-2025:21462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="lasso-devel" version="2.7.0" release="11.el9_7.3" epoch="0" arch="s390x" src="lasso-2.7.0-11.el9_7.3.src.rpm">
          <filename>lasso-devel-2.7.0-11.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">ddae4deb7d33572f2c62ce889a513b913f1882ee7eb4daef44898cbe8645ed35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22405</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-08 12:21:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
  * kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864)
  * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
  * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918)
  * kernel: tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect() (CVE-2025-39955)
  * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
  * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22405" id="RHSA-2025:22405" type="rhsa" title="RHSA-2025:22405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38724" id="CVE-2025-38724" type="cve" title="CVE-2025-38724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39864" id="CVE-2025-39864" type="cve" title="CVE-2025-39864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39898" id="CVE-2025-39898" type="cve" title="CVE-2025-39898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39918" id="CVE-2025-39918" type="cve" title="CVE-2025-39918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39955" id="CVE-2025-39955" type="cve" title="CVE-2025-39955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39981" id="CVE-2025-39981" type="cve" title="CVE-2025-39981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40058" id="CVE-2025-40058" type="cve" title="CVE-2025-40058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40185" id="CVE-2025-40185" type="cve" title="CVE-2025-40185"/>
      <reference href="https://bugzilla.redhat.com/2393172" id="2393172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396934" id="2396934" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400598" id="2400598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400628" id="2400628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402699" id="2402699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404105" id="2404105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406776" id="2406776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414741" id="2414741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22405.html" id="ALSA-2025:22405" type="self" title="ALSA-2025:22405"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">62d7d127e91e64ac0e626f542e3d845162446b9d66877763da318e761319203b</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.11.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">dcd7a48226b736b6f58c922e299bfa1aa9d24d94de2a367de33cea866bf57927</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22865</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-08 00:00:00"/>
    <updated date="2025-12-17 11:46:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
  * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22865" id="RHSA-2025:22865" type="rhsa" title="RHSA-2025:22865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39925" id="CVE-2025-39925" type="cve" title="CVE-2025-39925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39979" id="CVE-2025-39979" type="cve" title="CVE-2025-39979"/>
      <reference href="https://bugzilla.redhat.com/2400629" id="2400629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404109" id="2404109" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22865.html" id="ALSA-2025:22865" type="self" title="ALSA-2025:22865"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">666e4698a3c073416fa2a7f7a5009496d0eae8d10a238b4940f09639f70d37e2</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.13.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">bc8a356f21740a60ce26f15977e81d27ca9902bb733213dea5ba74e1f7c41685</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23109</id>
    <title>Moderate: mysql security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:21:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
  * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23109" id="RHSA-2025:23109" type="rhsa" title="RHSA-2025:23109"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53040" id="CVE-2025-53040" type="cve" title="CVE-2025-53040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53042" id="CVE-2025-53042" type="cve" title="CVE-2025-53042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53044" id="CVE-2025-53044" type="cve" title="CVE-2025-53044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53045" id="CVE-2025-53045" type="cve" title="CVE-2025-53045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53053" id="CVE-2025-53053" type="cve" title="CVE-2025-53053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53054" id="CVE-2025-53054" type="cve" title="CVE-2025-53054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53062" id="CVE-2025-53062" type="cve" title="CVE-2025-53062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53069" id="CVE-2025-53069" type="cve" title="CVE-2025-53069"/>
      <reference href="https://bugzilla.redhat.com/2405486" id="2405486" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405491" id="2405491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405511" id="2405511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405514" id="2405514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405523" id="2405523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405534" id="2405534" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405541" id="2405541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405544" id="2405544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23109.html" id="ALSA-2025:23109" type="self" title="ALSA-2025:23109"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="mysql-devel" version="8.0.44" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.44-1.el9_7.src.rpm">
          <filename>mysql-devel-8.0.44-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">67c571ced97827f9ee8b8095fa4f50caea8070d04d6da39b15780d9359473faa</sum>
        </package>
        <package name="mysql-test" version="8.0.44" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.44-1.el9_7.src.rpm">
          <filename>mysql-test-8.0.44-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">9f3087fbea252ded8fe47e0c16872a356e2968a8a07554e93ff29af92bbf6905</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23142</id>
    <title>Important: wireshark security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:27:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.  

Security Fix(es):  

  * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23142" id="RHSA-2025:23142" type="rhsa" title="RHSA-2025:23142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13499" id="CVE-2025-13499" type="cve" title="CVE-2025-13499"/>
      <reference href="https://bugzilla.redhat.com/2416293" id="2416293" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23142.html" id="ALSA-2025:23142" type="self" title="ALSA-2025:23142"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="wireshark-devel" version="3.4.10" release="8.el9_7.1" epoch="1" arch="s390x" src="wireshark-3.4.10-8.el9_7.1.src.rpm">
          <filename>wireshark-devel-3.4.10-8.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">2770f805d7de8f70191a5a2dc1d79e9e4c08c2b03ed129cfdd9d8023d57a4204</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23241</id>
    <title>Important: kernel security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2026-01-05 20:29:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499)
  * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)
  * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23241" id="RHSA-2025:23241" type="rhsa" title="RHSA-2025:23241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38499" id="CVE-2025-38499" type="cve" title="CVE-2025-38499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39966" id="CVE-2025-39966" type="cve" title="CVE-2025-39966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40176" id="CVE-2025-40176" type="cve" title="CVE-2025-40176"/>
      <reference href="https://bugzilla.redhat.com/2387670" id="2387670" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404107" id="2404107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414524" id="2414524" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23241.html" id="ALSA-2025:23241" type="self" title="ALSA-2025:23241"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">1ccc6e8071fa0bbe246fc6307469ac2064e24f410d7ac3cf704ce3ec885fb980</sum>
        </package>
        <package name="libperf" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.16.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">6eb3c7997a09c41618ff01fc3e3862e813bb79e6ae018402a2645031ee08ad72</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23323</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:52:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23323" id="RHSA-2025:23323" type="rhsa" title="RHSA-2025:23323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23323.html" id="ALSA-2025:23323" type="self" title="ALSA-2025:23323"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3.12-debug" version="3.12.12" release="1.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el9_7.src.rpm">
          <filename>python3.12-debug-3.12.12-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">00fb506e1dae233ca08eb386103c58021064d6c4aba5f649b85da7b0deaa7637</sum>
        </package>
        <package name="python3.12-test" version="3.12.12" release="1.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el9_7.src.rpm">
          <filename>python3.12-test-3.12.12-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">80636de2e7dd9bb652e9af63cb979ae12d760ef5d4d8e19b9ff96f387903dcab</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="1.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el9_7.src.rpm">
          <filename>python3.12-idle-3.12.12-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d3287220c2967682252f11b6ad4f3e4d20e31bb93f9bce13f4696052d79544bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23342</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:45:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642)
  * cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)
  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23342" id="RHSA-2025:23342" type="rhsa" title="RHSA-2025:23342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5642" id="CVE-2024-5642" type="cve" title="CVE-2024-5642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6069" id="CVE-2025-6069" type="cve" title="CVE-2025-6069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6075" id="CVE-2025-6075" type="cve" title="CVE-2025-6075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2294682" id="2294682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373234" id="2373234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2408891" id="2408891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23342.html" id="ALSA-2025:23342" type="self" title="ALSA-2025:23342"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3-test" version="3.9.25" release="2.el9_7" epoch="0" arch="s390x" src="python3.9-3.9.25-2.el9_7.src.rpm">
          <filename>python3-test-3.9.25-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">290569ca2a394e20b49e53a81ef780e81fdd631fa9e9bb95e5fd61072e50c655</sum>
        </package>
        <package name="python3-idle" version="3.9.25" release="2.el9_7" epoch="0" arch="s390x" src="python3.9-3.9.25-2.el9_7.src.rpm">
          <filename>python3-idle-3.9.25-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">d63f8a0027ba332b979db9517988cb30cee9528254e695e337596abd19f88618</sum>
        </package>
        <package name="python3-debug" version="3.9.25" release="2.el9_7" epoch="0" arch="s390x" src="python3.9-3.9.25-2.el9_7.src.rpm">
          <filename>python3-debug-3.9.25-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">ec602f6002eeb48eb703ae94f8f730bdb593d1bd64424e02a3da87e853d07763</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2627</id>
    <title>Important: kernel security update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-14 09:32:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ACPI: extlog: fix NULL pointer dereference check (CVE-2023-52605)
  * kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans (CVE-2024-50264)
  * kernel: HID: core: zero-initialize the report buffer (CVE-2024-50302)
  * kernel: can: bcm: Fix UAF in bcm_proc_show() (CVE-2023-52922)
  * kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113)
  * kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (CVE-2024-53197)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2627" id="RHSA-2025:2627" type="rhsa" title="RHSA-2025:2627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52605" id="CVE-2023-52605" type="cve" title="CVE-2023-52605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52922" id="CVE-2023-52922" type="cve" title="CVE-2023-52922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50264" id="CVE-2024-50264" type="cve" title="CVE-2024-50264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50302" id="CVE-2024-50302" type="cve" title="CVE-2024-50302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53113" id="CVE-2024-53113" type="cve" title="CVE-2024-53113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53197" id="CVE-2024-53197" type="cve" title="CVE-2024-53197"/>
      <reference href="https://bugzilla.redhat.com/2268295" id="2268295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327168" id="2327168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327169" id="2327169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329370" id="2329370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329924" id="2329924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334412" id="2334412" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2627.html" id="ALSA-2025:2627" type="self" title="ALSA-2025:2627"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-cross-headers-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">33ce4fa6fbbc24f441688dc816d9dd32c94966509f4a218530f62b08349aa8f2</sum>
        </package>
        <package name="libperf" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>libperf-5.14.0-503.31.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">cb8d2ddf7f87a013598c6ec29afd2f907239b29e9c85ccfc309e08e6955d1a47</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2668</id>
    <title>Important: .NET 9.0 security, bug fix, and enhancement update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-17 22:25:29"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Security Fix(es):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)


Bug Fix(es) and Enhancement(s):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2668" id="RHSA-2025:2668" type="rhsa" title="RHSA-2025:2668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24070" id="CVE-2025-24070" type="cve" title="CVE-2025-24070"/>
      <reference href="https://bugzilla.redhat.com/2349733" id="2349733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2668.html" id="ALSA-2025:2668" type="self" title="ALSA-2025:2668"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.104" release="1.el9_5" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el9_5.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">e39304bd808acb082714424e3b59a72d7eb55388def0c7bb543bb9fd74f3ef9a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2669</id>
    <title>Important: .NET 8.0 security, bug fix, and enhancement update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-17 22:27:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)


Bug Fix(es) and Enhancement(s):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2669" id="RHSA-2025:2669" type="rhsa" title="RHSA-2025:2669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24070" id="CVE-2025-24070" type="cve" title="CVE-2025-24070"/>
      <reference href="https://bugzilla.redhat.com/2349733" id="2349733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2669.html" id="ALSA-2025:2669" type="self" title="ALSA-2025:2669"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.114" release="1.el9_5" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el9_5.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el9_5.s390x.rpm</filename>
          <sum type="sha256">bec595831e9607e8772b795e73db80f3aa6700c32a95405f002e247debf21e1a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3631</id>
    <title>Low: python3.12 security update</title>
    <issued date="2025-04-07 00:00:00"/>
    <updated date="2025-04-08 09:22:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Uncontrolled CPU resource consumption when in http.cookies module (CVE-2024-7592)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3631" id="RHSA-2025:3631" type="rhsa" title="RHSA-2025:3631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7592" id="CVE-2024-7592" type="cve" title="CVE-2024-7592"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3631.html" id="ALSA-2025:3631" type="self" title="ALSA-2025:3631"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="python3.12-debug" version="3.12.5" release="2.el9_5.3" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.3.src.rpm">
          <filename>python3.12-debug-3.12.5-2.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">275cd33832680a587230d5bd9a0566cb15e73890e22c9bace3ae8384de732a46</sum>
        </package>
        <package name="python3.12-idle" version="3.12.5" release="2.el9_5.3" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.3.src.rpm">
          <filename>python3.12-idle-3.12.5-2.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">abfa113ead645ea37162663543b0f546a8abe36a0029d2d8fc71c33e3466c2f7</sum>
        </package>
        <package name="python3.12-test" version="3.12.5" release="2.el9_5.3" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el9_5.3.src.rpm">
          <filename>python3.12-test-3.12.5-2.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">cef2633bab44043f6fc421e6e15113b9847783675306ab6a88c2c65e43e78f27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3634</id>
    <title>Low: python3.11 security update</title>
    <issued date="2025-04-07 00:00:00"/>
    <updated date="2025-04-08 09:24:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Uncontrolled CPU resource consumption when in http.cookies module (CVE-2024-7592)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3634" id="RHSA-2025:3634" type="rhsa" title="RHSA-2025:3634"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7592" id="CVE-2024-7592" type="cve" title="CVE-2024-7592"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3634.html" id="ALSA-2025:3634" type="self" title="ALSA-2025:3634"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="python3.11-debug" version="3.11.9" release="7.el9_5.3" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.3.src.rpm">
          <filename>python3.11-debug-3.11.9-7.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">07bcb7a144168ce8467fcd0b13e91565847768e27122471cb0d04cb7d1590036</sum>
        </package>
        <package name="python3.11-test" version="3.11.9" release="7.el9_5.3" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.3.src.rpm">
          <filename>python3.11-test-3.11.9-7.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">43eb5dd360b6ef9d5088fe7b629a9d0f5399c9b2c048a1f477354542e5cb3d82</sum>
        </package>
        <package name="python3.11-idle" version="3.11.9" release="7.el9_5.3" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el9_5.3.src.rpm">
          <filename>python3.11-idle-3.11.9-7.el9_5.3.s390x.rpm</filename>
          <sum type="sha256">5d97c6a8ee978093d4125c1ffcc1c11cffb27dcde3767c77f9f74e81499f0ed9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3852</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-05-08 18:57:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3852" id="RHSA-2025:3852" type="rhsa" title="RHSA-2025:3852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3852.html" id="ALSA-2025:3852" type="self" title="ALSA-2025:3852"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="java-17-openjdk-slowdebug" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0cfe21eb58e33e20f4f3e4a56cbb97d01005b9a7ffef3b73e8cc77e8788b5298</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">13406f53167d8754db6c92e465b2e4618d8a1caf6a1695428b741164743aa97a</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">46dc3a646493fb443b146d7669f7452590dd86d3d6f0ae6ea935998ec48cb094</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">51223e05b1a0ff626a517df360e7c47bf065d9e7139ccefe1ab900587669efaf</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">65ec352e4527424b4108dd848b0e21d7f2cde4ed6fa1fa6cea9f717c9f169cce</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">85831499d09ca9bf18793a2f96d3f0832a9e457d67229a9b346f4322c0dceb01</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.15.0.6" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.15.0.6-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">980fc59d69506718324c8d7d5127670d9d68196a6e8d581b2d4da37b52670415</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3855</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-05-08 18:54:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3855" id="RHSA-2025:3855" type="rhsa" title="RHSA-2025:3855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3855.html" id="ALSA-2025:3855" type="self" title="ALSA-2025:3855"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">0a561b5cfa8749cf9d85d0f61e9748dbedd19a9e1e6c242ccdc0cdda127f8d21</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1cc6317a1a56078becffef2378726b18fb3fef74d9737839df25978398eef13b</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">367766c146889b20b0d91e065a39a72f05863092f46e4d7ededb780efc7ea86f</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ac29956093c476175963cce8816413dc7db009a86c57443c5c8732151c8b3125</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d11547f7db1b661f0352bc2fa81fc8ab006cea431345de67a377d3d30f44ba6a</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e75c0988966e84c34edb69b69994fb874a271135d849ed4923a2b9c107dcda79</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.7.0.6" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.7.0.6-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e7ef75798b7b23307987d5262d896d21f6ae77fbd8e28ac426d1812cf6e734b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3937</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-04-21 08:27:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CVE-2024-53150)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3937" id="RHSA-2025:3937" type="rhsa" title="RHSA-2025:3937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53150" id="CVE-2024-53150" type="cve" title="CVE-2024-53150"/>
      <reference href="https://bugzilla.redhat.com/2333971" id="2333971" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3937.html" id="ALSA-2025:3937" type="self" title="ALSA-2025:3937"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="libperf" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>libperf-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">5fe9aceb3e749b905df03048cde211bf090cb378cfd04ad101ccf2b503832d59</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="s390x" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-cross-headers-5.14.0-503.38.1.el9_5.s390x.rpm</filename>
          <sum type="sha256">997953659a77e9294b64c767d639e330ceb0a0a93a25fb2d5982554534119682</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4244</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-04-28 00:00:00"/>
    <updated date="2025-04-28 19:47:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: buffer overflow in the GNU C Library's assert() (CVE-2025-0395)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4244" id="RHSA-2025:4244" type="rhsa" title="RHSA-2025:4244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0395" id="CVE-2025-0395" type="cve" title="CVE-2025-0395"/>
      <reference href="https://bugzilla.redhat.com/2339460" id="2339460" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4244.html" id="ALSA-2025:4244" type="self" title="ALSA-2025:4244"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="nss_hesiod" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="s390x" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>nss_hesiod-2.34-125.el9_5.8.alma.1.s390x.rpm</filename>
          <sum type="sha256">029097814fcf09f1e6b2b8ca967d7f99f1528e63f16d76ee77d387e92ab530f8</sum>
        </package>
        <package name="glibc-nss-devel" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="s390x" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>glibc-nss-devel-2.34-125.el9_5.8.alma.1.s390x.rpm</filename>
          <sum type="sha256">35781fd980af41564ebea6e89278265958c822115075e3e936eec69ec4b4315d</sum>
        </package>
        <package name="nss_db" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="s390x" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>nss_db-2.34-125.el9_5.8.alma.1.s390x.rpm</filename>
          <sum type="sha256">8e08b6c3f8ad3b2d515aca0fe4ea13a5d342dca68fed66f4c56794e461f2192c</sum>
        </package>
        <package name="glibc-static" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="s390x" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>glibc-static-2.34-125.el9_5.8.alma.1.s390x.rpm</filename>
          <sum type="sha256">ea543fc40c4a1746fde6bbe4d48f8b969dd4c9bedf000327fe44297d68c9171a</sum>
        </package>
        <package name="glibc-benchtests" version="2.34" release="125.el9_5.8.alma.1" epoch="0" arch="s390x" src="glibc-2.34-125.el9_5.8.alma.1.src.rpm">
          <filename>glibc-benchtests-2.34-125.el9_5.8.alma.1.s390x.rpm</filename>
          <sum type="sha256">f214d69e98b9690024772a7d9601e8fe1c6c89f37f6d1104722840cf2e19acee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4491</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2025-05-06 00:00:00"/>
    <updated date="2025-05-07 16:35:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.  

Security Fix(es):  

  * 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4491" id="RHSA-2025:4491" type="rhsa" title="RHSA-2025:4491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2487" id="CVE-2025-2487" type="cve" title="CVE-2025-2487"/>
      <reference href="https://bugzilla.redhat.com/2353071" id="2353071" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-4491.html" id="ALSA-2025:4491" type="self" title="ALSA-2025:4491"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_5_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_5_default</name>
        <package name="389-ds-base-devel" version="2.5.2" release="9.el9_5" epoch="0" arch="s390x" src="389-ds-base-2.5.2-9.el9_5.src.rpm">
          <filename>389-ds-base-devel-2.5.2-9.el9_5.s390x.rpm</filename>
          <sum type="sha256">5eeb8067a2b58901b55ad8dce7eb56f5c520aa6cafe178c02856301ca60a8869</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:6977</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:51:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:6977" id="RHSA-2025:6977" type="rhsa" title="RHSA-2025:6977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938"/>
      <reference href="https://bugzilla.redhat.com/2343237" id="2343237" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-6977.html" id="ALSA-2025:6977" type="self" title="ALSA-2025:6977"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3-debug" version="3.9.21" release="2.el9" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9.src.rpm">
          <filename>python3-debug-3.9.21-2.el9.s390x.rpm</filename>
          <sum type="sha256">45e7d06bc3d54cf4fa18d4070c8e57a41ce56a4ab18b335738c4411e71469a45</sum>
        </package>
        <package name="python3-test" version="3.9.21" release="2.el9" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9.src.rpm">
          <filename>python3-test-3.9.21-2.el9.s390x.rpm</filename>
          <sum type="sha256">5318bf0bcea19d11d3db3204c842101854bc90551b54196915debdee91f0c7ee</sum>
        </package>
        <package name="python3-idle" version="3.9.21" release="2.el9" epoch="0" arch="s390x" src="python3.9-3.9.21-2.el9.src.rpm">
          <filename>python3-idle-3.9.21-2.el9.s390x.rpm</filename>
          <sum type="sha256">5441f14ea1bade9f1a46056b714679a53dcc37897cbb8dd5b1ae177c1bac98c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7107</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:35:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7107" id="RHSA-2025:7107" type="rhsa" title="RHSA-2025:7107"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938"/>
      <reference href="https://bugzilla.redhat.com/2343237" id="2343237" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7107.html" id="ALSA-2025:7107" type="self" title="ALSA-2025:7107"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3.12-debug" version="3.12.9" release="1.el9" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9.src.rpm">
          <filename>python3.12-debug-3.12.9-1.el9.s390x.rpm</filename>
          <sum type="sha256">1d67d697aaf29311f8bd7679a34ce62d24f262495087287c8df88cfa4bb18ffb</sum>
        </package>
        <package name="python3.12-test" version="3.12.9" release="1.el9" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9.src.rpm">
          <filename>python3.12-test-3.12.9-1.el9.s390x.rpm</filename>
          <sum type="sha256">9d91b30445d42aa10ccd33bae3f13677138eba06945c7a550ee72778b53d593e</sum>
        </package>
        <package name="python3.12-idle" version="3.12.9" release="1.el9" epoch="0" arch="s390x" src="python3.12-3.12.9-1.el9.src.rpm">
          <filename>python3.12-idle-3.12.9-1.el9.s390x.rpm</filename>
          <sum type="sha256">b3390337dfe036a67a0ac720933900299687dd7afa1e98b251bf969e236db07f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7109</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:31:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7109" id="RHSA-2025:7109" type="rhsa" title="RHSA-2025:7109"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938"/>
      <reference href="https://bugzilla.redhat.com/2343237" id="2343237" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7109.html" id="ALSA-2025:7109" type="self" title="ALSA-2025:7109"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3.11-idle" version="3.11.11" release="2.el9" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9.src.rpm">
          <filename>python3.11-idle-3.11.11-2.el9.s390x.rpm</filename>
          <sum type="sha256">15d33b5d51a684fd603587f4eabe4efd729ef0b73524447460b35e756022a759</sum>
        </package>
        <package name="python3.11-test" version="3.11.11" release="2.el9" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9.src.rpm">
          <filename>python3.11-test-3.11.11-2.el9.s390x.rpm</filename>
          <sum type="sha256">994a83fb476cf885b61e1c9982dc86b2aab19ed3da08f519c924a1f0ae339e0e</sum>
        </package>
        <package name="python3.11-debug" version="3.11.11" release="2.el9" epoch="0" arch="s390x" src="python3.11-3.11.11-2.el9.src.rpm">
          <filename>python3.11-debug-3.11.11-2.el9.s390x.rpm</filename>
          <sum type="sha256">e679f6da1b2816150a6a68926fe0d21f533c8a637592cc19700b1c60081fd979</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7138</id>
    <title>Moderate: protobuf security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:27:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf security update</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.  

Security Fix(es):  

  * protobuf: message parsing vulnerability in ProtocolBuffers (CVE-2022-1941)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7138" id="RHSA-2025:7138" type="rhsa" title="RHSA-2025:7138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1941" id="CVE-2022-1941" type="cve" title="CVE-2022-1941"/>
      <reference href="https://bugzilla.redhat.com/2291470" id="2291470" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7138.html" id="ALSA-2025:7138" type="self" title="ALSA-2025:7138"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="protobuf-lite-devel" version="3.14.0" release="16.el9" epoch="0" arch="s390x" src="protobuf-3.14.0-16.el9.src.rpm">
          <filename>protobuf-lite-devel-3.14.0-16.el9.s390x.rpm</filename>
          <sum type="sha256">6a5ab59cd0cf7ce1049a2c0135b34023403e2ec4011ad1fdc88c3d2d47a7aa6e</sum>
        </package>
        <package name="protobuf-compiler" version="3.14.0" release="16.el9" epoch="0" arch="s390x" src="protobuf-3.14.0-16.el9.src.rpm">
          <filename>protobuf-compiler-3.14.0-16.el9.s390x.rpm</filename>
          <sum type="sha256">c39327b1d5287c9a744e261c5bff8e1f4c65878debb34eac9385d92ed685ac47</sum>
        </package>
        <package name="protobuf-devel" version="3.14.0" release="16.el9" epoch="0" arch="s390x" src="protobuf-3.14.0-16.el9.src.rpm">
          <filename>protobuf-devel-3.14.0-16.el9.s390x.rpm</filename>
          <sum type="sha256">eaf6c9a89cb61453fe80340f1abdceb0a469330b7c1f28cdf6eaf1e31dd157a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7163</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:20:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)
  * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)
  * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)
  * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)
  * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)
  * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)
  * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)
  * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)
  * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7163" id="RHSA-2025:7163" type="rhsa" title="RHSA-2025:7163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9632" id="CVE-2024-9632" type="cve" title="CVE-2024-9632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26594" id="CVE-2025-26594" type="cve" title="CVE-2025-26594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26595" id="CVE-2025-26595" type="cve" title="CVE-2025-26595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26596" id="CVE-2025-26596" type="cve" title="CVE-2025-26596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26597" id="CVE-2025-26597" type="cve" title="CVE-2025-26597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26598" id="CVE-2025-26598" type="cve" title="CVE-2025-26598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26599" id="CVE-2025-26599" type="cve" title="CVE-2025-26599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26600" id="CVE-2025-26600" type="cve" title="CVE-2025-26600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26601" id="CVE-2025-26601" type="cve" title="CVE-2025-26601"/>
      <reference href="https://bugzilla.redhat.com/2317233" id="2317233" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345248" id="2345248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345251" id="2345251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345252" id="2345252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345253" id="2345253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345254" id="2345254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345255" id="2345255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345256" id="2345256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345257" id="2345257" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7163.html" id="ALSA-2025:7163" type="self" title="ALSA-2025:7163"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="28.el9_6" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-28.el9_6.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-28.el9_6.noarch.rpm</filename>
          <sum type="sha256">3b5bd53a2a3f676acc5de9d501d20df93aa48d19e1ee9f9f51594d08563b468b</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="28.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el9_6.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-28.el9_6.s390x.rpm</filename>
          <sum type="sha256">c1bc39823d4996a2dcd410fa00eb7a8cb15db1ce2a7fdc5c7f80ea7e0cc6c7bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7165</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:22:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)
  * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594)
  * xorg: xwayland: Use-after-free in SyncInitTrigger() (CVE-2025-26601)
  * xorg: xwayland: Use-after-free in PlayReleasedEvents() (CVE-2025-26600)
  * xorg: xwayland: Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599)
  * xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598)
  * xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597)
  * xorg: xwayland: Heap overflow in XkbWriteKeySyms() (CVE-2025-26596)
  * Xorg: xwayland: Buffer overflow in XkbVModMaskText() (CVE-2025-26595)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7165" id="RHSA-2025:7165" type="rhsa" title="RHSA-2025:7165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9632" id="CVE-2024-9632" type="cve" title="CVE-2024-9632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26594" id="CVE-2025-26594" type="cve" title="CVE-2025-26594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26595" id="CVE-2025-26595" type="cve" title="CVE-2025-26595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26596" id="CVE-2025-26596" type="cve" title="CVE-2025-26596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26597" id="CVE-2025-26597" type="cve" title="CVE-2025-26597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26598" id="CVE-2025-26598" type="cve" title="CVE-2025-26598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26599" id="CVE-2025-26599" type="cve" title="CVE-2025-26599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26600" id="CVE-2025-26600" type="cve" title="CVE-2025-26600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26601" id="CVE-2025-26601" type="cve" title="CVE-2025-26601"/>
      <reference href="https://bugzilla.redhat.com/2317233" id="2317233" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345248" id="2345248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345251" id="2345251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345252" id="2345252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345253" id="2345253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345254" id="2345254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345255" id="2345255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345256" id="2345256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345257" id="2345257" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7165.html" id="ALSA-2025:7165" type="self" title="ALSA-2025:7165"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="xorg-x11-server-Xwayland-devel" version="23.2.7" release="3.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-23.2.7-3.el9_6.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-23.2.7-3.el9_6.s390x.rpm</filename>
          <sum type="sha256">513e9d30e7603bfba2557a380825f3805bd28d585be0b9330f4cb39c68fbce8d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7178</id>
    <title>Moderate: gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:18:39"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update</summary>
    <description>The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data.   

Security Fix(es):  

  * gstreamer: EXIF Metadata Parsing Integer Overflow (CVE-2024-4453)
  * gstreamer: AV1 Video Parsing Stack-based Buffer Overflow (CVE-2024-0444)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7178" id="RHSA-2025:7178" type="rhsa" title="RHSA-2025:7178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0444" id="CVE-2024-0444" type="cve" title="CVE-2024-0444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4453" id="CVE-2024-4453" type="cve" title="CVE-2024-4453"/>
      <reference href="https://bugzilla.redhat.com/2282999" id="2282999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292335" id="2292335" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7178.html" id="ALSA-2025:7178" type="self" title="ALSA-2025:7178"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.22.12" release="3.el9" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-3.el9.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.12-3.el9.s390x.rpm</filename>
          <sum type="sha256">7d76dd7f159c0b28d61712abe561710f6dd73ad4fcdc09a5ed57503a65aba069</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7201</id>
    <title>Moderate: corosync security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:16:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>corosync security update</summary>
    <description>The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.  

Security Fix(es):  

  * corosync: Stack buffer overflow from 'orf_token_endian_convert' (CVE-2025-30472)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7201" id="RHSA-2025:7201" type="rhsa" title="RHSA-2025:7201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30472" id="CVE-2025-30472" type="cve" title="CVE-2025-30472"/>
      <reference href="https://bugzilla.redhat.com/2354229" id="2354229" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7201.html" id="ALSA-2025:7201" type="self" title="ALSA-2025:7201"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="corosync-vqsim" version="3.1.9" release="2.el9_6" epoch="0" arch="s390x" src="corosync-3.1.9-2.el9_6.src.rpm">
          <filename>corosync-vqsim-3.1.9-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">5dbf3a6dff3c327fde9c09b997cda5f4e7f53eb565f3658f657af23503410c8b</sum>
        </package>
        <package name="corosynclib" version="3.1.9" release="2.el9_6" epoch="0" arch="s390x" src="corosync-3.1.9-2.el9_6.src.rpm">
          <filename>corosynclib-3.1.9-2.el9_6.s390x.rpm</filename>
          <sum type="sha256">6d7d26d47200b5ffa1616a8da8f37093e94d3278b78cebd2db137451e1fd9d2c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7309</id>
    <title>Moderate: openjpeg2 security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:08:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openjpeg2 security update</summary>
    <description>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.  

Security Fix(es):  

  * openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826)
  * openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7309" id="RHSA-2025:7309" type="rhsa" title="RHSA-2025:7309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56826" id="CVE-2024-56826" type="cve" title="CVE-2024-56826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56827" id="CVE-2024-56827" type="cve" title="CVE-2024-56827"/>
      <reference href="https://bugzilla.redhat.com/2335172" id="2335172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2335174" id="2335174" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7309.html" id="ALSA-2025:7309" type="self" title="ALSA-2025:7309"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="openjpeg2-tools" version="2.4.0" release="8.el9" epoch="0" arch="s390x" src="openjpeg2-2.4.0-8.el9.src.rpm">
          <filename>openjpeg2-tools-2.4.0-8.el9.s390x.rpm</filename>
          <sum type="sha256">383699754145c277afa8fb70402b5961efa4c90ff68f496862dc237770f68ef8</sum>
        </package>
        <package name="openjpeg2-devel" version="2.4.0" release="8.el9" epoch="0" arch="s390x" src="openjpeg2-2.4.0-8.el9.src.rpm">
          <filename>openjpeg2-devel-2.4.0-8.el9.s390x.rpm</filename>
          <sum type="sha256">91f00cea697a4ac25cac571b19b2afb7db726544f7fa04ff6fd7d4fdb2ceb518</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7350</id>
    <title>Moderate: perl-Module-ScanDeps security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-07-02 13:04:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl-Module-ScanDeps security update</summary>
    <description>This module scans potential modules used by perl programs and returns a hash reference. Its keys are the module names as they appear in %INC (e.g. Test/More.pm). The values are hash references.  

Security Fix(es):  

  * module-scandeps: local privilege escalation via unsanitized input (CVE-2024-10224)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7350" id="RHSA-2025:7350" type="rhsa" title="RHSA-2025:7350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10224" id="CVE-2024-10224" type="cve" title="CVE-2024-10224"/>
      <reference href="https://bugzilla.redhat.com/2327329" id="2327329" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7350.html" id="ALSA-2025:7350" type="self" title="ALSA-2025:7350"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="perl-Module-ScanDeps" version="1.30" release="6.el9" epoch="0" arch="noarch" src="perl-Module-ScanDeps-1.30-6.el9.src.rpm">
          <filename>perl-Module-ScanDeps-1.30-6.el9.noarch.rpm</filename>
          <sum type="sha256">58e02999f61c36061ec35282d70735bc5f2aa26e5cd90232472bc3205b37ee54</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7395</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-26 08:45:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.  

Security Fix(es):  

  * 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7395" id="RHSA-2025:7395" type="rhsa" title="RHSA-2025:7395"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-2487" id="CVE-2025-2487" type="cve" title="CVE-2025-2487"/>
      <reference href="https://bugzilla.redhat.com/2353071" id="2353071" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7395.html" id="ALSA-2025:7395" type="self" title="ALSA-2025:7395"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="389-ds-base-devel" version="2.6.1" release="8.el9_6" epoch="0" arch="s390x" src="389-ds-base-2.6.1-8.el9_6.src.rpm">
          <filename>389-ds-base-devel-2.6.1-8.el9_6.s390x.rpm</filename>
          <sum type="sha256">901d9ce99549badd9e088101f9bcae7ab99cfc1136a50608a044983b8dbdf6bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7402</id>
    <title>Moderate: nginx security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:08:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741)
  * nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742)
  * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7402" id="RHSA-2025:7402" type="rhsa" title="RHSA-2025:7402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41741" id="CVE-2022-41741" type="cve" title="CVE-2022-41741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41742" id="CVE-2022-41742" type="cve" title="CVE-2022-41742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7347" id="CVE-2024-7347" type="cve" title="CVE-2024-7347"/>
      <reference href="https://bugzilla.redhat.com/2141495" id="2141495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2141496" id="2141496" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7402.html" id="ALSA-2025:7402" type="self" title="ALSA-2025:7402"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="nginx-mod-devel" version="1.20.1" release="22.el9_6.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-22.el9_6.2.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.20.1-22.el9_6.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">f118abca7b83767ac16647d95bbbeb516a93a1d7932ab39798a67ffd022b09b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7422</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-26 08:59:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  

Security Fix(es):  

  * ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
  * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
  * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
  * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
  * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
  * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7422" id="RHSA-2025:7422" type="rhsa" title="RHSA-2025:7422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46751" id="CVE-2023-46751" type="cve" title="CVE-2023-46751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46951" id="CVE-2024-46951" type="cve" title="CVE-2024-46951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46952" id="CVE-2024-46952" type="cve" title="CVE-2024-46952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46953" id="CVE-2024-46953" type="cve" title="CVE-2024-46953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46954" id="CVE-2024-46954" type="cve" title="CVE-2024-46954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46956" id="CVE-2024-46956" type="cve" title="CVE-2024-46956"/>
      <reference href="https://bugzilla.redhat.com/2253365" id="2253365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325041" id="2325041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325043" id="2325043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325044" id="2325044" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325045" id="2325045" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325047" id="2325047" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7422.html" id="ALSA-2025:7422" type="self" title="ALSA-2025:7422"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libgs-devel" version="9.54.0" release="18.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-18.el9_6.src.rpm">
          <filename>libgs-devel-9.54.0-18.el9_6.s390x.rpm</filename>
          <sum type="sha256">16da12cebba223156f9e48639e01b78fa9ce08e4b7bae4b4d3d5df84a48333b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7423</id>
    <title>Important: kernel security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-24 22:28:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: io_uring/sqpoll: zero sqd-&gt;thread on tctx errors (CVE-2025-21633)
  * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007)
  * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)
  * kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927)
  * kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CVE-2025-21993)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7423" id="RHSA-2025:7423" type="rhsa" title="RHSA-2025:7423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58005" id="CVE-2024-58005" type="cve" title="CVE-2024-58005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58007" id="CVE-2024-58007" type="cve" title="CVE-2024-58007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58069" id="CVE-2024-58069" type="cve" title="CVE-2024-58069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21633" id="CVE-2025-21633" type="cve" title="CVE-2025-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21927" id="CVE-2025-21927" type="cve" title="CVE-2025-21927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21993" id="CVE-2025-21993" type="cve" title="CVE-2025-21993"/>
      <reference href="https://bugzilla.redhat.com/2338813" id="2338813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348565" id="2348565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348590" id="2348590" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350364" id="2350364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356593" id="2356593" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356908" id="2356908" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7423.html" id="ALSA-2025:7423" type="self" title="ALSA-2025:7423"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">48be527bc5ea595870ed5c914d1b6d59d3d877f5a4c624fd598ea248404f3cb7</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.16.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d0cebb3ad1379275dfe6961f174020fa43d38cd5983a57cfa4144a9bb4d24a34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7430</id>
    <title>Important: yelp security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:37:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>yelp security update</summary>
    <description>Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.  

Security Fix(es):  

  * yelp: Arbitrary file read (CVE-2025-3155)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7430" id="RHSA-2025:7430" type="rhsa" title="RHSA-2025:7430"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3155" id="CVE-2025-3155" type="cve" title="CVE-2025-3155"/>
      <reference href="https://bugzilla.redhat.com/2357091" id="2357091" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7430.html" id="ALSA-2025:7430" type="self" title="ALSA-2025:7430"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="yelp-devel" version="40.3" release="2.el9_6.1" epoch="2" arch="s390x" src="yelp-40.3-2.el9_6.1.src.rpm">
          <filename>yelp-devel-40.3-2.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">b98ac42c5689b6d9af9f97adf82b30f1102d6efda4b2ba38d2596ac9fcb3a2e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7437</id>
    <title>Moderate: avahi security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-21 06:23:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.  

Security Fix(es):  

  * avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7437" id="RHSA-2025:7437" type="rhsa" title="RHSA-2025:7437"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52616" id="CVE-2024-52616" type="cve" title="CVE-2024-52616"/>
      <reference href="https://bugzilla.redhat.com/2326429" id="2326429" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7437.html" id="ALSA-2025:7437" type="self" title="ALSA-2025:7437"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="avahi-compat-howl" version="0.8" release="22.el9_6" epoch="0" arch="s390x" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-compat-howl-0.8-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">267f88bb1ea7cd5e8ed8d13080aac8902050c48a2c1260574e3c90ea578b3f57</sum>
        </package>
        <package name="avahi-compat-howl-devel" version="0.8" release="22.el9_6" epoch="0" arch="s390x" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-compat-howl-devel-0.8-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">4043acafccae39a235f5824e3a918cb98f2b72a64bc619ce829d52a6edbaad25</sum>
        </package>
        <package name="avahi-compat-libdns_sd" version="0.8" release="22.el9_6" epoch="0" arch="s390x" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-compat-libdns_sd-0.8-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">6cb1c3ee2104c4a186181f86c921ac0dd90c4bc78b24909de6b424ace44d37ea</sum>
        </package>
        <package name="avahi-glib-devel" version="0.8" release="22.el9_6" epoch="0" arch="s390x" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-glib-devel-0.8-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">72c4b0c219d22084314ae7a186fa0cef0ed394cf50de0818ef7f3b17224a3a51</sum>
        </package>
        <package name="avahi-devel" version="0.8" release="22.el9_6" epoch="0" arch="s390x" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-devel-0.8-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">7f0ec3f39889883d04df83c0439f0b44676e4cfdda1d3a8f4410a1708a749c8c</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" version="0.8" release="22.el9_6" epoch="0" arch="s390x" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.8-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">ebef32bffb91e9408670af722ad3436b51fadd4d35e4da1d4cc028e90d4adba0</sum>
        </package>
        <package name="avahi-gobject" version="0.8" release="22.el9_6" epoch="0" arch="s390x" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-gobject-0.8-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">f7efde2ef357eb80f73a006ef2082269e6151353feaa64d6b4ed993a7f7790c4</sum>
        </package>
        <package name="avahi-gobject-devel" version="0.8" release="22.el9_6" epoch="0" arch="s390x" src="avahi-0.8-22.el9_6.src.rpm">
          <filename>avahi-gobject-devel-0.8-22.el9_6.s390x.rpm</filename>
          <sum type="sha256">fe28781f94bf4ced2ec9207d75f820971f09c7e15f4982681aa80f0ee6d73c85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7586</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-07-02 12:13:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  

Security Fix(es):  

  * Ghostscript: NPDL device: Compression buffer overflow (CVE-2025-27832)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7586" id="RHSA-2025:7586" type="rhsa" title="RHSA-2025:7586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27832" id="CVE-2025-27832" type="cve" title="CVE-2025-27832"/>
      <reference href="https://bugzilla.redhat.com/2354949" id="2354949" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7586.html" id="ALSA-2025:7586" type="self" title="ALSA-2025:7586"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libgs-devel" version="9.54.0" release="19.el9_6" epoch="0" arch="s390x" src="ghostscript-9.54.0-19.el9_6.src.rpm">
          <filename>libgs-devel-9.54.0-19.el9_6.s390x.rpm</filename>
          <sum type="sha256">04221f0a3c99fa8ef0fd8c203e557fd39a9b302f022838caf0680f4126139ef4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7598</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-21 06:14:32"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime 8.0.16.Security Fix(es):  

  * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7598" id="RHSA-2025:7598" type="rhsa" title="RHSA-2025:7598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646"/>
      <reference href="https://bugzilla.redhat.com/2365317" id="2365317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7598.html" id="ALSA-2025:7598" type="self" title="ALSA-2025:7598"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.116" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el9_6.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.116-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">a6022ce5d98ee7d7f743ca25d283146709aa123295c526e1ae07304a44b1ecba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7600</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-07-02 12:10:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.Security Fix(es):  

  * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7600" id="RHSA-2025:7600" type="rhsa" title="RHSA-2025:7600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646"/>
      <reference href="https://bugzilla.redhat.com/2365317" id="2365317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7600.html" id="ALSA-2025:7600" type="self" title="ALSA-2025:7600"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.106" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el9_6.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.106-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">12742bf15374d2634eab9a293c3979aa4ef4f8fe26f1150674894cea78dbd961</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7903</id>
    <title>Important: kernel security update</title>
    <issued date="2025-05-19 00:00:00"/>
    <updated date="2025-05-26 08:50:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756)
  * kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CVE-2025-21966)
  * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7903" id="RHSA-2025:7903" type="rhsa" title="RHSA-2025:7903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21756" id="CVE-2025-21756" type="cve" title="CVE-2025-21756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21966" id="CVE-2025-21966" type="cve" title="CVE-2025-21966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37749" id="CVE-2025-37749" type="cve" title="CVE-2025-37749"/>
      <reference href="https://bugzilla.redhat.com/2348609" id="2348609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356605" id="2356605" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363332" id="2363332" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7903.html" id="ALSA-2025:7903" type="self" title="ALSA-2025:7903"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libperf" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">b464ea3913243c19db4f5fd7f5fa117eccef6990991ce78dc36a1beac6d9e342</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.17.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d66838bbbe28e3ff63d84b3594addb7fec47bc365b519e079a8d8353626d1dc5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8142</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-05-26 00:00:00"/>
    <updated date="2025-05-28 13:38:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8142" id="RHSA-2025:8142" type="rhsa" title="RHSA-2025:8142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21964" id="CVE-2025-21964" type="cve" title="CVE-2025-21964"/>
      <reference href="https://bugzilla.redhat.com/2356665" id="2356665" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8142.html" id="ALSA-2025:8142" type="self" title="ALSA-2025:8142"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">5b33b48cad90602c7a680c1d7566172932b5d9c0b84b1e0c6161d8097bfeda5c</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.18.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">c4cbf76d0bf1fee6c46a27024c023a4adb787d1b8ec4fd5ab402e6e0beb9c1b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8183</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2025-05-27 00:00:00"/>
    <updated date="2025-05-27 07:55:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-3887)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8183" id="RHSA-2025:8183" type="rhsa" title="RHSA-2025:8183"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3887" id="CVE-2025-3887" type="cve" title="CVE-2025-3887"/>
      <reference href="https://bugzilla.redhat.com/2367919" id="2367919" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8183.html" id="ALSA-2025:8183" type="self" title="ALSA-2025:8183"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.22.12" release="4.el9_6" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-4.el9_6.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.12-4.el9_6.s390x.rpm</filename>
          <sum type="sha256">e53ce4bb5ddbe77162cd4c41da57e4357faee84b1f555620060337e69589bd53</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8333</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-02 00:00:00"/>
    <updated date="2025-07-02 12:04:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Use after Free in gru_set_context_option leading to kernel panic (CVE-2022-3424)
  * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8333" id="RHSA-2025:8333" type="rhsa" title="RHSA-2025:8333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3424" id="CVE-2022-3424" type="cve" title="CVE-2022-3424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21764" id="CVE-2025-21764" type="cve" title="CVE-2025-21764"/>
      <reference href="https://bugzilla.redhat.com/2132640" id="2132640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348575" id="2348575" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8333.html" id="ALSA-2025:8333" type="self" title="ALSA-2025:8333"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libperf" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">58c7e70ab1432479d04b23045ff8c46e398097b4410fce4d26f1f0560fc4595b</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.19.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d3b25517128305443e8d0e4b1dcff419c6b6f3c5b392e614d752f4e2ba392877</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8337</id>
    <title>Important: varnish security update</title>
    <issued date="2025-06-02 00:00:00"/>
    <updated date="2025-06-02 12:04:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>varnish security update</summary>
    <description>Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.  

Security Fix(es):  

  * varnish: request smuggling attacks (CVE-2025-47905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8337" id="RHSA-2025:8337" type="rhsa" title="RHSA-2025:8337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47905" id="CVE-2025-47905" type="cve" title="CVE-2025-47905"/>
      <reference href="https://bugzilla.redhat.com/2364235" id="2364235" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8337.html" id="ALSA-2025:8337" type="self" title="ALSA-2025:8337"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="varnish-devel" version="6.6.2" release="6.el9_6.1" epoch="0" arch="s390x" src="varnish-6.6.2-6.el9_6.1.src.rpm">
          <filename>varnish-devel-6.6.2-6.el9_6.1.s390x.rpm</filename>
          <sum type="sha256">8357cfc03a1c0d3f54b82fa2085b9f76cb8e474bc3ed929bbbe843c8cd3f70a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8643</id>
    <title>Important: kernel security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-12 13:36:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926)
  * kernel: vlan: enforce underlying device type (CVE-2025-21920)
  * kernel: xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997)
  * kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055)
  * kernel: ext4: fix OOB read when checking dotdot dir (CVE-2025-37785)
  * kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8643" id="RHSA-2025:8643" type="rhsa" title="RHSA-2025:8643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21920" id="CVE-2025-21920" type="cve" title="CVE-2025-21920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21926" id="CVE-2025-21926" type="cve" title="CVE-2025-21926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21997" id="CVE-2025-21997" type="cve" title="CVE-2025-21997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22055" id="CVE-2025-22055" type="cve" title="CVE-2025-22055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37785" id="CVE-2025-37785" type="cve" title="CVE-2025-37785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37943" id="CVE-2025-37943" type="cve" title="CVE-2025-37943"/>
      <reference href="https://bugzilla.redhat.com/2356587" id="2356587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356639" id="2356639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357143" id="2357143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360300" id="2360300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360921" id="2360921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367748" id="2367748" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8643.html" id="ALSA-2025:8643" type="self" title="ALSA-2025:8643"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libperf" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">47dfb936866abebf425b11ef52c095c7fcedce68b28b24f55755dde726688346</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.21.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">95cbff1fb09eeab89b3b087a912b406cdb961f6e0c4d20cea10a104b362b9f8a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8655</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-10 08:32:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8655" id="RHSA-2025:8655" type="rhsa" title="RHSA-2025:8655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4802" id="CVE-2025-4802" type="cve" title="CVE-2025-4802"/>
      <reference href="https://bugzilla.redhat.com/2367468" id="2367468" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8655.html" id="ALSA-2025:8655" type="self" title="ALSA-2025:8655"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="glibc-nss-devel" version="2.34" release="168.el9_6.19" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-nss-devel-2.34-168.el9_6.19.s390x.rpm</filename>
          <sum type="sha256">3527544122f1ac12114cf4dcc4de64b83a75eed5def1b1c6075ec2da324b4cec</sum>
        </package>
        <package name="glibc-benchtests" version="2.34" release="168.el9_6.19" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-benchtests-2.34-168.el9_6.19.s390x.rpm</filename>
          <sum type="sha256">62b0759c67cbbdd1a18dd925ac0743cbd158357d6ae4702526cc054da56bbac4</sum>
        </package>
        <package name="glibc-static" version="2.34" release="168.el9_6.19" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>glibc-static-2.34-168.el9_6.19.s390x.rpm</filename>
          <sum type="sha256">dd598c4550d9a4be957da5d5a38d70e673fd48574ada53df5f8cc1a0e7f5265a</sum>
        </package>
        <package name="nss_db" version="2.34" release="168.el9_6.19" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>nss_db-2.34-168.el9_6.19.s390x.rpm</filename>
          <sum type="sha256">ec92c702bdc699907ef33bff6d1741168c0f7705f091d0d437660132e0721cae</sum>
        </package>
        <package name="nss_hesiod" version="2.34" release="168.el9_6.19" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.19.src.rpm">
          <filename>nss_hesiod-2.34-168.el9_6.19.s390x.rpm</filename>
          <sum type="sha256">edbdf9a13b0c40bbb706993f60a5a22a750b123a911c16ade6e1a0c239e98b9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8813</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-13 11:16:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.117 and .NET Runtime 8.0.17.Security Fix(es):  

  * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8813" id="RHSA-2025:8813" type="rhsa" title="RHSA-2025:8813"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399"/>
      <reference href="https://bugzilla.redhat.com/2369701" id="2369701" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8813.html" id="ALSA-2025:8813" type="self" title="ALSA-2025:8813"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.117" release="1.el9_6" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el9_6.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.117-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">4bec9033d31aaf238c2c239f2911019434d11d3f0b33867863d4625f0477d82b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8817</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-12 08:20:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.107 and .NET Runtime 9.0.6.Security Fix(es):  

  * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8817" id="RHSA-2025:8817" type="rhsa" title="RHSA-2025:8817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399"/>
      <reference href="https://bugzilla.redhat.com/2369701" id="2369701" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8817.html" id="ALSA-2025:8817" type="self" title="ALSA-2025:8817"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.107" release="1.el9_6" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el9_6.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.107-1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0da8305cbaeb93892cdc20009968f755a87b3acd16f3e2b1c11f8bbb1fb66792</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9080</id>
    <title>Important: kernel security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 11:20:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961)
  * kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969)
  * kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963)
  * kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979)
  * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999)
  * kernel: md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126)
  * kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9080" id="RHSA-2025:9080" type="rhsa" title="RHSA-2025:9080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21961" id="CVE-2025-21961" type="cve" title="CVE-2025-21961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21963" id="CVE-2025-21963" type="cve" title="CVE-2025-21963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21969" id="CVE-2025-21969" type="cve" title="CVE-2025-21969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21979" id="CVE-2025-21979" type="cve" title="CVE-2025-21979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21999" id="CVE-2025-21999" type="cve" title="CVE-2025-21999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22126" id="CVE-2025-22126" type="cve" title="CVE-2025-22126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37750" id="CVE-2025-37750" type="cve" title="CVE-2025-37750"/>
      <reference href="https://bugzilla.redhat.com/2356584" id="2356584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356633" id="2356633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356642" id="2356642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356652" id="2356652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357134" id="2357134" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360236" id="2360236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363341" id="2363341" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9080.html" id="ALSA-2025:9080" type="self" title="ALSA-2025:9080"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8abe9d40bf5a80b7a26eb96ef6d8a0abe169b9243ce812244636ec7513597a66</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.22.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">d9e5331c821553ba2f58c9d97c7d010e0aaf90ba048afd477f1168c1a45f6a30</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9114</id>
    <title>Important: apache-commons-beanutils security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 11:14:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>apache-commons-beanutils security update</summary>
    <description>The Apache Commons BeanUtils library provides utility methods for accessing and modifying properties of arbitrary JavaBeans.  

Security Fix(es):  

  * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9114" id="RHSA-2025:9114" type="rhsa" title="RHSA-2025:9114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48734" id="CVE-2025-48734" type="cve" title="CVE-2025-48734"/>
      <reference href="https://bugzilla.redhat.com/2368956" id="2368956" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9114.html" id="ALSA-2025:9114" type="self" title="ALSA-2025:9114"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="apache-commons-beanutils" version="1.9.4" release="10.el9_6" epoch="0" arch="noarch" src="apache-commons-beanutils-1.9.4-10.el9_6.src.rpm">
          <filename>apache-commons-beanutils-1.9.4-10.el9_6.noarch.rpm</filename>
          <sum type="sha256">d5abbee0a7923ce4b894aea8eec8e6a87711d651ce8d72837dcad10c7084c5ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9118</id>
    <title>Important: libvpx security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 11:13:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Double-free in libvpx encoder (CVE-2025-5283)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9118" id="RHSA-2025:9118" type="rhsa" title="RHSA-2025:9118"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5283" id="CVE-2025-5283" type="cve" title="CVE-2025-5283"/>
      <reference href="https://bugzilla.redhat.com/2368749" id="2368749" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9118.html" id="ALSA-2025:9118" type="self" title="ALSA-2025:9118"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libvpx-devel" version="1.9.0" release="9.el9_6" epoch="0" arch="s390x" src="libvpx-1.9.0-9.el9_6.src.rpm">
          <filename>libvpx-devel-1.9.0-9.el9_6.s390x.rpm</filename>
          <sum type="sha256">fdc47905259fcf6236ec6699877d546c9a7185874dae081e25514ebdd7286c4d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9184</id>
    <title>Important: ipa security update</title>
    <issued date="2025-06-17 00:00:00"/>
    <updated date="2025-06-30 13:36:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  

Security Fix(es):  

  * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9184" id="RHSA-2025:9184" type="rhsa" title="RHSA-2025:9184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4404" id="CVE-2025-4404" type="cve" title="CVE-2025-4404"/>
      <reference href="https://bugzilla.redhat.com/2364606" id="2364606" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9184.html" id="ALSA-2025:9184" type="self" title="ALSA-2025:9184"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="python3-ipatests" version="4.12.2" release="14.el9_6.1" epoch="0" arch="noarch" src="ipa-4.12.2-14.el9_6.1.src.rpm">
          <filename>python3-ipatests-4.12.2-14.el9_6.1.noarch.rpm</filename>
          <sum type="sha256">331040804a9215b0f5fbcec70e7f800344c4d1f1a1394413916a202c09c06a91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9302</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:45:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883)
  * kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919)
  * kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104)
  * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)
  * kernel: ext4: ignore xattrs past end (CVE-2025-37738)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9302" id="RHSA-2025:9302" type="rhsa" title="RHSA-2025:9302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21883" id="CVE-2025-21883" type="cve" title="CVE-2025-21883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21919" id="CVE-2025-21919" type="cve" title="CVE-2025-21919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22104" id="CVE-2025-22104" type="cve" title="CVE-2025-22104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23150" id="CVE-2025-23150" type="cve" title="CVE-2025-23150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37738" id="CVE-2025-37738" type="cve" title="CVE-2025-37738"/>
      <reference href="https://bugzilla.redhat.com/2355415" id="2355415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356618" id="2356618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360265" id="2360265" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363268" id="2363268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363305" id="2363305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9302.html" id="ALSA-2025:9302" type="self" title="ALSA-2025:9302"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="libperf" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">565cd0a3d701123822f5a70c483fd7b0834ebfd8a2d9c8f13d09e150d4d5e683</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.23.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">8750dd7decb0542111e0bc7ad022e4d5bde1dafb21d28c7c382ddd2cabacd527</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9303</id>
    <title>Important: xorg-x11-server and xorg-x11-server-Xwayland security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-06-30 13:24:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server and xorg-x11-server-Xwayland security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9303" id="RHSA-2025:9303" type="rhsa" title="RHSA-2025:9303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49175" id="CVE-2025-49175" type="cve" title="CVE-2025-49175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49176" id="CVE-2025-49176" type="cve" title="CVE-2025-49176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49178" id="CVE-2025-49178" type="cve" title="CVE-2025-49178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49179" id="CVE-2025-49179" type="cve" title="CVE-2025-49179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49180" id="CVE-2025-49180" type="cve" title="CVE-2025-49180"/>
      <reference href="https://bugzilla.redhat.com/2369947" id="2369947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369954" id="2369954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369977" id="2369977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369978" id="2369978" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369981" id="2369981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9303.html" id="ALSA-2025:9303" type="self" title="ALSA-2025:9303"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="31.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-31.el9_6.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-31.el9_6.s390x.rpm</filename>
          <sum type="sha256">92077d81d396f7d1d61377bb8530419f83367cef9ca49f59904168baed6b187d</sum>
        </package>
        <package name="xorg-x11-server-Xwayland-devel" version="23.2.7" release="4.el9_6" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-23.2.7-4.el9_6.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-23.2.7-4.el9_6.s390x.rpm</filename>
          <sum type="sha256">ad1a6dd583473c0123aeae396b58d4c3f45b2b42c461853ab5dc58a45cab8ba9</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="31.el9_6" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-31.el9_6.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-31.el9_6.noarch.rpm</filename>
          <sum type="sha256">d0597aa66c866770c5ea810962474f4c55c86264f84a5f75b4e92f416e1c22a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9330</id>
    <title>Important: perl-YAML-LibYAML security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:23:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-YAML-LibYAML security update</summary>
    <description>Kirill Siminov's "libyaml" is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was originally bound to Python and was later bound to Ruby.  

Security Fix(es):  

  * yaml-libyaml: LibYAML Perl File Modification Vulnerability (CVE-2025-40908)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9330" id="RHSA-2025:9330" type="rhsa" title="RHSA-2025:9330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40908" id="CVE-2025-40908" type="cve" title="CVE-2025-40908"/>
      <reference href="https://bugzilla.redhat.com/2369630" id="2369630" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9330.html" id="ALSA-2025:9330" type="self" title="ALSA-2025:9330"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="perl-YAML-LibYAML" version="0.82" release="6.1.el9_6" epoch="1" arch="s390x" src="perl-YAML-LibYAML-0.82-6.1.el9_6.src.rpm">
          <filename>perl-YAML-LibYAML-0.82-6.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">0844fade9644e0ada1be8cf1b8c274c0b825145954e1d574649a0b09d50105b2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9462</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-30 13:07:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.   

Security Fix(es):  

  * qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9462" id="RHSA-2025:9462" type="rhsa" title="RHSA-2025:9462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5455" id="CVE-2025-5455" type="cve" title="CVE-2025-5455"/>
      <reference href="https://bugzilla.redhat.com/2369722" id="2369722" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9462.html" id="ALSA-2025:9462" type="self" title="ALSA-2025:9462"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="qt5-qtbase-static" version="5.15.9" release="11.el9_6" epoch="0" arch="s390x" src="qt5-qtbase-5.15.9-11.el9_6.src.rpm">
          <filename>qt5-qtbase-static-5.15.9-11.el9_6.s390x.rpm</filename>
          <sum type="sha256">52c398c2197e8a8f585870db287eaf882c6eac5ecc087a622622764899debe5d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9517</id>
    <title>Important: perl-File-Find-Rule security update</title>
    <issued date="2025-06-24 00:00:00"/>
    <updated date="2025-06-30 13:05:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-File-Find-Rule security update</summary>
    <description>File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories.  

Security Fix(es):  

  * perl-file-find-rule: File::Find::Rule Arbitrary Code Execution (CVE-2011-10007)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9517" id="RHSA-2025:9517" type="rhsa" title="RHSA-2025:9517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2011-10007" id="CVE-2011-10007" type="cve" title="CVE-2011-10007"/>
      <reference href="https://bugzilla.redhat.com/2370424" id="2370424" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9517.html" id="ALSA-2025:9517" type="self" title="ALSA-2025:9517"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="perl-File-Find-Rule" version="0.34" release="19.1.el9_6" epoch="0" arch="noarch" src="perl-File-Find-Rule-0.34-19.1.el9_6.src.rpm">
          <filename>perl-File-Find-Rule-0.34-19.1.el9_6.noarch.rpm</filename>
          <sum type="sha256">6e134185b9d45a1f2b199fbad1e1785420082f93ed527bddb5aa6eb456432605</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9877</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-06-30 00:00:00"/>
    <updated date="2025-06-30 12:51:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Vector register overwrite bug in glibc (CVE-2025-5702)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9877" id="RHSA-2025:9877" type="rhsa" title="RHSA-2025:9877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5702" id="CVE-2025-5702" type="cve" title="CVE-2025-5702"/>
      <reference href="https://bugzilla.redhat.com/2370472" id="2370472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9877.html" id="ALSA-2025:9877" type="self" title="ALSA-2025:9877"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="nss_db" version="2.34" release="168.el9_6.20" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>nss_db-2.34-168.el9_6.20.s390x.rpm</filename>
          <sum type="sha256">04671a6025fd5d2c5500236ab7b80ea951b695ef28b1d8725ce392a036c17b4b</sum>
        </package>
        <package name="glibc-benchtests" version="2.34" release="168.el9_6.20" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-benchtests-2.34-168.el9_6.20.s390x.rpm</filename>
          <sum type="sha256">077b0bfc94e8d222bcefb036e396e130627b4ced44bdb46fdce5eec7ea628e20</sum>
        </package>
        <package name="nss_hesiod" version="2.34" release="168.el9_6.20" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>nss_hesiod-2.34-168.el9_6.20.s390x.rpm</filename>
          <sum type="sha256">480e5c877f41276b04a61aa93e0853345ca7cd5eb069b8e4ac14465af6124aaa</sum>
        </package>
        <package name="glibc-static" version="2.34" release="168.el9_6.20" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-static-2.34-168.el9_6.20.s390x.rpm</filename>
          <sum type="sha256">973bfa0f8ce5ed098e4c1a3c8d27aa36dc2e7f26146285aa4644b100b5b74b8c</sum>
        </package>
        <package name="glibc-nss-devel" version="2.34" release="168.el9_6.20" epoch="0" arch="s390x" src="glibc-2.34-168.el9_6.20.src.rpm">
          <filename>glibc-nss-devel-2.34-168.el9_6.20.s390x.rpm</filename>
          <sum type="sha256">ebfabfe123aa43add1e6777516439c42951f0649a3bdc9f62df3b73d9b228431</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9880</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-30 00:00:00"/>
    <updated date="2025-07-02 07:27:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Squashfs: fix handling and sanity checking of xattr_ids count (CVE-2023-52933)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9880" id="RHSA-2025:9880" type="rhsa" title="RHSA-2025:9880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52933" id="CVE-2023-52933" type="cve" title="CVE-2023-52933"/>
      <reference href="https://bugzilla.redhat.com/2355476" id="2355476" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9880.html" id="ALSA-2025:9880" type="self" title="ALSA-2025:9880"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_6_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_6_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-cross-headers-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">7b74d4c48947ead46389f800a457b810cb67df16efbce6927d2191a49a2aab07</sum>
        </package>
        <package name="libperf" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="s390x" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>libperf-5.14.0-570.24.1.el9_6.s390x.rpm</filename>
          <sum type="sha256">da2bce44a1d0c2a52dc002fa7cebbaaac5b02cda99475686cba508ad38a74efa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0126</id>
    <title>Moderate: poppler security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:21:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0126" id="RHSA-2026:0126" type="rhsa" title="RHSA-2026:0126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32365" id="CVE-2025-32365" type="cve" title="CVE-2025-32365"/>
      <reference href="https://bugzilla.redhat.com/2357656" id="2357656" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0126.html" id="ALSA-2026:0126" type="self" title="ALSA-2026:0126"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="poppler-glib-doc" version="21.01.0" release="23.el9_7" epoch="0" arch="noarch" src="poppler-21.01.0-23.el9_7.src.rpm">
          <filename>poppler-glib-doc-21.01.0-23.el9_7.noarch.rpm</filename>
          <sum type="sha256">2361e9dc4e8e5d5f1179ab44710407d24f216ee1d6c884ac602529632cff4d39</sum>
        </package>
        <package name="poppler-glib-devel" version="21.01.0" release="23.el9_7" epoch="0" arch="s390x" src="poppler-21.01.0-23.el9_7.src.rpm">
          <filename>poppler-glib-devel-21.01.0-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">2d6332d2441bbebbaad11a8155182d70591baad3cc70eecd6de0db4d1e422a56</sum>
        </package>
        <package name="poppler-cpp-devel" version="21.01.0" release="23.el9_7" epoch="0" arch="s390x" src="poppler-21.01.0-23.el9_7.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">42e0fe5634417656b9efb54cab7d6587e59d51667d630e278efd823b8c03a566</sum>
        </package>
        <package name="poppler-qt5-devel" version="21.01.0" release="23.el9_7" epoch="0" arch="s390x" src="poppler-21.01.0-23.el9_7.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">476d1002710a18740f1aed96955abbb9d3fd3bb0b7dc0aae01e82436335910fb</sum>
        </package>
        <package name="poppler-devel" version="21.01.0" release="23.el9_7" epoch="0" arch="s390x" src="poppler-21.01.0-23.el9_7.src.rpm">
          <filename>poppler-devel-21.01.0-23.el9_7.s390x.rpm</filename>
          <sum type="sha256">7c50e83124735172961034bcbc0d44e3fbf7f331d37ad56f9639102466698ed2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0137</id>
    <title>Important: mariadb security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:24:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mariadb security update</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.   

Security Fix(es):  

  * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0137" id="RHSA-2026:0137" type="rhsa" title="RHSA-2026:0137"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13699" id="CVE-2025-13699" type="cve" title="CVE-2025-13699"/>
      <reference href="https://bugzilla.redhat.com/2417693" id="2417693" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0137.html" id="ALSA-2026:0137" type="self" title="ALSA-2026:0137"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="mariadb-test" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-test-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">8f4dd9e8c0e8f5cffd077a0eb33707ebdad500d78f27d7baf2706b2701b2b729</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-embedded-devel-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">936b0253f100926fbb1633b45ef8c030e2b49ec686669223c4309143fba9dd2e</sum>
        </package>
        <package name="mariadb-devel" version="10.5.29" release="3.el9_7" epoch="3" arch="s390x" src="mariadb-10.5.29-3.el9_7.src.rpm">
          <filename>mariadb-devel-10.5.29-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">98944ad0bb4d9f93d79b4eac172723f13372ba10e675a1610aa51f92a7d96f1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0445</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:31:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)
  * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840)
  * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
  * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0445" id="RHSA-2026:0445" type="rhsa" title="RHSA-2026:0445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39806" id="CVE-2025-39806" type="cve" title="CVE-2025-39806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39840" id="CVE-2025-39840" type="cve" title="CVE-2025-39840"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39883" id="CVE-2025-39883" type="cve" title="CVE-2025-39883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40240" id="CVE-2025-40240" type="cve" title="CVE-2025-40240"/>
      <reference href="https://bugzilla.redhat.com/2395807" id="2395807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396936" id="2396936" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397553" id="2397553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418832" id="2418832" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0445.html" id="ALSA-2026:0445" type="self" title="ALSA-2026:0445"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">7a5114eb2d4add3818b7efb7b2f16d69fdfc4da249dc2e4294aa81526aa90e44</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.20.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">c53c52320321ffe28cf1139edfcba55260abdbc7344dba6d02194d4abc0dda31</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0491</id>
    <title>Moderate: postgresql security update</title>
    <issued date="2026-01-13 00:00:00"/>
    <updated date="2026-01-16 15:16:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817)
  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0491" id="RHSA-2026:0491" type="rhsa" title="RHSA-2026:0491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12817" id="CVE-2025-12817" type="cve" title="CVE-2025-12817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414825" id="2414825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0491.html" id="ALSA-2026:0491" type="self" title="ALSA-2026:0491"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="postgresql-server-devel" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-server-devel-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">20f010c693b76bc037e419ef0db02f22917208c95afea2ce32b5bd8d08631d5e</sum>
        </package>
        <package name="postgresql-private-devel" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-private-devel-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">2228a61497c4b1aeafd5ebcae1da9ec191ae4939ec3766b5baa08e0f362b0553</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.23" release="1.el9_7" epoch="0" arch="noarch" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-test-rpm-macros-13.23-1.el9_7.noarch.rpm</filename>
          <sum type="sha256">8a5cd0ac240429ef34bfd5533793e0653bf11ce77496984eca7ac903213ae11d</sum>
        </package>
        <package name="postgresql-test" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-test-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d4736ec3c6618ffba109563cc22886934e781b3aaee37ea907b9fd1b4b6f97e1</sum>
        </package>
        <package name="postgresql-docs" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-docs-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">dacd1f94f1814401531c6447ac051ccecfaf1541c292e2935fdcd052bf8ed642</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-upgrade-devel-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">fb24fd488382fe0dd7ab0463c955a9602a50fac56cb6f7210b379247604ae887</sum>
        </package>
        <package name="postgresql-static" version="13.23" release="1.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-1.el9_7.src.rpm">
          <filename>postgresql-static-13.23-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">fdf3d608f256ab3ede3d3cff678aaa95bdc077d521d9121afc71d386c77dced6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0700</id>
    <title>Moderate: transfig security update</title>
    <issued date="2026-01-15 00:00:00"/>
    <updated date="2026-01-16 14:46:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>transfig security update</summary>
    <description>The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments). Install transfig if you need a utility for translating FIG or PIC figures into certain graphics languages.  

Security Fix(es):  

  * xfig: xfig: Stack-overflow allows possible code execution via local input manipulation (CVE-2025-46397)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0700" id="RHSA-2026:0700" type="rhsa" title="RHSA-2026:0700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46397" id="CVE-2025-46397" type="cve" title="CVE-2025-46397"/>
      <reference href="https://bugzilla.redhat.com/2362058" id="2362058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0700.html" id="ALSA-2026:0700" type="self" title="ALSA-2026:0700"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="transfig" version="3.2.7b" release="11.el9_7" epoch="1" arch="s390x" src="transfig-3.2.7b-11.el9_7.src.rpm">
          <filename>transfig-3.2.7b-11.el9_7.s390x.rpm</filename>
          <sum type="sha256">c18c6cb20a4ff14f98be7f14c93e0097d79ccaade6461c1dea39cf906e5ae828</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0793</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-23 13:21:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703)
  * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)
  * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)
  * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287)
  * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0793" id="RHSA-2026:0793" type="rhsa" title="RHSA-2026:0793"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38703" id="CVE-2025-38703" type="cve" title="CVE-2025-38703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39933" id="CVE-2025-39933" type="cve" title="CVE-2025-39933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40277" id="CVE-2025-40277" type="cve" title="CVE-2025-40277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68285" id="CVE-2025-68285" type="cve" title="CVE-2025-68285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68287" id="CVE-2025-68287" type="cve" title="CVE-2025-68287"/>
      <reference href="https://bugzilla.redhat.com/2393157" id="2393157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401432" id="2401432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419954" id="2419954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422788" id="2422788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422801" id="2422801" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0793.html" id="ALSA-2026:0793" type="self" title="ALSA-2026:0793"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">23115b67215e46f1bca3b70a4f700f339a7f2f8d1cbf5f2039debf42b3b0a97d</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.24.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">eb334978e2c58e9f5e5dc6d4d73ec6124f14944f7be229ff79e120ce7eb2561d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0927</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-24 01:49:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142862, AlmaLinux-142881, AlmaLinux-142882, AlmaLinux-142883, AlmaLinux-142884, AlmaLinux-142885, AlmaLinux-142886, AlmaLinux-142887, AlmaLinux-142888)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0927" id="RHSA-2026:0927" type="rhsa" title="RHSA-2026:0927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0927.html" id="ALSA-2026:0927" type="self" title="ALSA-2026:0927"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="java-17-openjdk-slowdebug" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">037893149f47aa6e7002c1dcf04c0d72aadbbbb991468ab28c621920d2860369</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">51dee4d44feb1d779e217abf87e5b724b6365c6e6260ea7df8c7a33a23bb0818</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">8eaf1f52a007dbd68298c00c415f134130dad9a088f37ff2ae48b2246273de16</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c8f6bef58bbd94ace8804dbabe60b608cc5a09f9b89b3db59309ec36e873830b</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d2d798e841bf706d2f85bce765c2f98f50ba5848e0970712e9fc5223c3a4e69f</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f07a048717a921a976cca1cce64e5768c189ceaf680a807e11219f49539d8567</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.18.0.8" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.18.0.8-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">f0a6ab9944c11b58dccd0af40113a6cd501f2f35880ce680743a9c41ca168cd2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0928</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-24 01:32:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0928" id="RHSA-2026:0928" type="rhsa" title="RHSA-2026:0928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0928.html" id="ALSA-2026:0928" type="self" title="ALSA-2026:0928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2ae3981412dd1d7d449d7acdd8dd3033792724cb6b6acd24759161ba99fb1496</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">372ab1ba489881ff6763b5ce69fe4ac1026df8245035e77c3b2def3dc904276c</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b54847c5a7a118a8e546acfbe661798dc20144e048696e71d67773177fe91c09</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d406d36a6c4ce15b9841dfecd3dfc328e6c746c5c3aa8c8a5a1a26103eb095f3</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e480fab069d1b02676c591827fae81d7cbb7d1ab8b22501f359e1e91e6685151</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ecdac096885b2d95fb9bbd26bdf29afb11b1bb79053998710a9e8ea72fdc80b6</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.10.0.7" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.10.0.7-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">fc939ec8a9709918bb307cc7173b952a63af54a102b8220a10abc27fc58ad452</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0933</id>
    <title>Important: java-25-openjdk security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-28 14:34:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-25-openjdk security update</summary>
    <description>The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0933" id="RHSA-2026:0933" type="rhsa" title="RHSA-2026:0933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0933.html" id="ALSA-2026:0933" type="self" title="ALSA-2026:0933"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="java-25-openjdk-static-libs-slowdebug" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-static-libs-slowdebug-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1539f2a58f39be6635df1507edd05a3790f117efb2170fdd381b6d12dc0a677f</sum>
        </package>
        <package name="java-25-openjdk-headless-slowdebug" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-headless-slowdebug-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">8b2e059cd5caa827fe0d3ce61d49caafc69f18c6587839436b797cd42e8cdd3c</sum>
        </package>
        <package name="java-25-openjdk-src-slowdebug" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-src-slowdebug-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a49e86d4dde3a1c1f1067d3c5ff3cdf0423effa5bc19ca63b8a53252a8dba208</sum>
        </package>
        <package name="java-25-openjdk-devel-slowdebug" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-devel-slowdebug-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">dfef9402f64a7f1b06016310707b934d1b9a6c39794b02b90e313995d48d1949</sum>
        </package>
        <package name="java-25-openjdk-jmods-slowdebug" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-jmods-slowdebug-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ee263ac9cbb13125f6dc56562611fc2b9500597a931d8545b25bb0ac9b5a184a</sum>
        </package>
        <package name="java-25-openjdk-slowdebug" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-slowdebug-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">eee28b87b2a5328779c87d6fd5b6136e73c45023cc2609f4b3bd533ea538a050</sum>
        </package>
        <package name="java-25-openjdk-demo-slowdebug" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-demo-slowdebug-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ef5b30385b658cf81f9670c9058300681d7d54cc19060d220572213b5d55b8db</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter-slowdebug" version="25.0.2.0.10" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.2.0.10-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-slowdebug-25.0.2.0.10-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">ff53d387169d73476de75359e204008444feaac7a8f2141980c49220cf85f788</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0936</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-01-21 00:00:00"/>
    <updated date="2026-01-24 01:44:04"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0936" id="RHSA-2026:0936" type="rhsa" title="RHSA-2026:0936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13601" id="CVE-2025-13601" type="cve" title="CVE-2025-13601"/>
      <reference href="https://bugzilla.redhat.com/2416741" id="2416741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0936.html" id="ALSA-2026:0936" type="self" title="ALSA-2026:0936"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="glib2-static" version="2.68.4" release="18.el9_7.1" epoch="0" arch="s390x" src="glib2-2.68.4-18.el9_7.1.src.rpm">
          <filename>glib2-static-2.68.4-18.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">4aad953900096c3b476f2732e08adad257186a95e3c3f9c6cb9103569a2f6a12</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10745</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:32:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10745" id="RHSA-2026:10745" type="rhsa" title="RHSA-2026:10745"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10745.html" id="ALSA-2026:10745" type="self" title="ALSA-2026:10745"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3.12-test" version="3.12.12" release="4.el9_7.3" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.3.src.rpm">
          <filename>python3.12-test-3.12.12-4.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">60b8c973531fa94b79a9eff562dfb58b0698a3317de9d0d37fe5a4d4f2318a1d</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="4.el9_7.3" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.3.src.rpm">
          <filename>python3.12-idle-3.12.12-4.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">937f5e240780e74d82dd07a02be4af9aa256844bb70912912b4a334b77147bb6</sum>
        </package>
        <package name="python3.12-debug" version="3.12.12" release="4.el9_7.3" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.3.src.rpm">
          <filename>python3.12-debug-3.12.12-4.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">b149c5a5364f763f6868a720dd44ae1378bd097aef79cbd5332de63c544c8c89</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10774</id>
    <title>Important: python3.11 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:35:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10774" id="RHSA-2026:10774" type="rhsa" title="RHSA-2026:10774"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10774.html" id="ALSA-2026:10774" type="self" title="ALSA-2026:10774"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3.11-test" version="3.11.13" release="5.3.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.3.el9_7.src.rpm">
          <filename>python3.11-test-3.11.13-5.3.el9_7.s390x.rpm</filename>
          <sum type="sha256">9b95433a02e3b650d761663ba7e3527910a9033a1dc4aa14b75b6cd9f6c3daf0</sum>
        </package>
        <package name="python3.11-debug" version="3.11.13" release="5.3.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.3.el9_7.src.rpm">
          <filename>python3.11-debug-3.11.13-5.3.el9_7.s390x.rpm</filename>
          <sum type="sha256">9de35a73ddf8013768d88b5221adc879e206cdb677501969359c53bb153a6000</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="5.3.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.3.el9_7.src.rpm">
          <filename>python3.11-idle-3.11.13-5.3.el9_7.s390x.rpm</filename>
          <sum type="sha256">dfaef69ed48d0b15dd4fe8359bf8d3d3b4afb0774fc7b6d306446b72db0fed01</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10949</id>
    <title>Important: python3.9 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:38:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10949" id="RHSA-2026:10949" type="rhsa" title="RHSA-2026:10949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-10949.html" id="ALSA-2026:10949" type="self" title="ALSA-2026:10949"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3-test" version="3.9.25" release="3.el9_7.3" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.3.src.rpm">
          <filename>python3-test-3.9.25-3.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">48ac940f61a9e4b81f2c6457dc5dc85ab22245d0f0a5251f43eeaf3086effcc5</sum>
        </package>
        <package name="python3-debug" version="3.9.25" release="3.el9_7.3" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.3.src.rpm">
          <filename>python3-debug-3.9.25-3.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">537779cf1e9b90aa98a01efb894a51ce4ef48e6c6821e14d3d4fc004797ca338</sum>
        </package>
        <package name="python3-idle" version="3.9.25" release="3.el9_7.3" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.3.src.rpm">
          <filename>python3-idle-3.9.25-3.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">d1aa6efdb7c7823628e375790f112a3e98de43b33e453128682b423a23e7870e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11369</id>
    <title>Important: xorg-x11-server-Xwayland security update</title>
    <issued date="2026-04-28 00:00:00"/>
    <updated date="2026-04-29 08:45:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11369" id="RHSA-2026:11369" type="rhsa" title="RHSA-2026:11369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-11369.html" id="ALSA-2026:11369" type="self" title="ALSA-2026:11369"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="xorg-x11-server-Xwayland-devel" version="23.2.7" release="6.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-23.2.7-6.el9_7.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-23.2.7-6.el9_7.s390x.rpm</filename>
          <sum type="sha256">528b1d40ad653e8ee2d306d0f3950b691c953d9c82be48b0f4341bec99d40550</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11388</id>
    <title>Important: xorg-x11-server security update</title>
    <issued date="2026-04-28 00:00:00"/>
    <updated date="2026-04-29 08:43:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11388" id="RHSA-2026:11388" type="rhsa" title="RHSA-2026:11388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-11388.html" id="ALSA-2026:11388" type="self" title="ALSA-2026:11388"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="33.el9_7" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-33.el9_7.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-33.el9_7.noarch.rpm</filename>
          <sum type="sha256">7977bc9d7b343335f336cba8f279e8bdf48d3f7f820fe02724c0c96b17777138</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="33.el9_7" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-33.el9_7.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-33.el9_7.s390x.rpm</filename>
          <sum type="sha256">b4bea9bb0ed9c043b17019665fc399cc3507f563aa3a21b62f85a60391e04e52</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1143</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-30 09:51:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141)
  * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349)
  * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731)
  * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)
  * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258)
  * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294)
  * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)
  * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1143" id="RHSA-2026:1143" type="rhsa" title="RHSA-2026:1143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38141" id="CVE-2025-38141" type="cve" title="CVE-2025-38141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38349" id="CVE-2025-38349" type="cve" title="CVE-2025-38349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38731" id="CVE-2025-38731" type="cve" title="CVE-2025-38731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40248" id="CVE-2025-40248" type="cve" title="CVE-2025-40248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40258" id="CVE-2025-40258" type="cve" title="CVE-2025-40258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40294" id="CVE-2025-40294" type="cve" title="CVE-2025-40294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68301" id="CVE-2025-68301" type="cve" title="CVE-2025-68301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68305" id="CVE-2025-68305" type="cve" title="CVE-2025-68305"/>
      <reference href="https://bugzilla.redhat.com/2376052" id="2376052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2381870" id="2381870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393488" id="2393488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418872" id="2418872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418876" id="2418876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419891" id="2419891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422836" id="2422836" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422840" id="2422840" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1143.html" id="ALSA-2026:1143" type="self" title="ALSA-2026:1143"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">90724ce798731d9b7cc45c23bf042a10d750dda3af361e0d4bce532892611d5d</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.26.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">d0ce27a6f5d91f633f84e3f0724d3d683cb2e49a853b9cf5c9e13862b6dc1867</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11504</id>
    <title>Important: PackageKit security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-30 08:54:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>PackageKit security update</summary>
    <description>PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.  

Security Fix(es):  

  * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11504" id="RHSA-2026:11504" type="rhsa" title="RHSA-2026:11504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41651" id="CVE-2026-41651" type="cve" title="CVE-2026-41651"/>
      <reference href="https://bugzilla.redhat.com/2460604" id="2460604" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-11504.html" id="ALSA-2026:11504" type="self" title="ALSA-2026:11504"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="PackageKit-glib-devel" version="1.2.6" release="2.el9_7" epoch="0" arch="s390x" src="PackageKit-1.2.6-2.el9_7.src.rpm">
          <filename>PackageKit-glib-devel-1.2.6-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">77310c16ad5b4c714a5c30fc38363b73c43d8ae4df301bcf0ccc9bbe4174d54c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:12271</id>
    <title>Important: libtiff security update</title>
    <issued date="2026-04-30 00:00:00"/>
    <updated date="2026-05-01 06:49:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:12271" id="RHSA-2026:12271" type="rhsa" title="RHSA-2026:12271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4775" id="CVE-2026-4775" type="cve" title="CVE-2026-4775"/>
      <reference href="https://bugzilla.redhat.com/2450768" id="2450768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-12271.html" id="ALSA-2026:12271" type="self" title="ALSA-2026:12271"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libtiff-tools" version="4.4.0" release="15.el9_7.3" epoch="0" arch="s390x" src="libtiff-4.4.0-15.el9_7.3.src.rpm">
          <filename>libtiff-tools-4.4.0-15.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">c3adb0eaa948461d508369c09c61b2c02f5988f62947ac7271fa48bda2263a93</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13565</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-04 00:00:00"/>
    <updated date="2026-05-07 00:12:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
  * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13565" id="RHSA-2026:13565" type="rhsa" title="RHSA-2026:13565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23136" id="CVE-2026-23136" type="cve" title="CVE-2026-23136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23270" id="CVE-2026-23270" type="cve" title="CVE-2026-23270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31402" id="CVE-2026-31402" type="cve" title="CVE-2026-31402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/2439852" id="2439852" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448745" id="2448745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454844" id="2454844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460538" id="2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-13565.html" id="ALSA-2026:13565" type="self" title="ALSA-2026:13565"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.54.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">3edfb485095f06725210d627a6fa4e7f2bb3845c9cdfde4f17f693c7caa9735a</sum>
        </package>
        <package name="libperf" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.54.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">9d55dab5f5d5cb0bad6fee659b3ee75afbab234d7f9fe84685d9699bc8f4c5ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13673</id>
    <title>Moderate: corosync security update</title>
    <issued date="2026-05-05 00:00:00"/>
    <updated date="2026-05-08 08:24:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>corosync security update</summary>
    <description>The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.  

Security Fix(es):  

  * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
  * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13673" id="RHSA-2026:13673" type="rhsa" title="RHSA-2026:13673"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35091" id="CVE-2026-35091" type="cve" title="CVE-2026-35091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35092" id="CVE-2026-35092" type="cve" title="CVE-2026-35092"/>
      <reference href="https://bugzilla.redhat.com/2453813" id="2453813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453814" id="2453814" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-13673.html" id="ALSA-2026:13673" type="self" title="ALSA-2026:13673"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="corosync-vqsim" version="3.1.9" release="2.el9_7.1" epoch="0" arch="s390x" src="corosync-3.1.9-2.el9_7.1.src.rpm">
          <filename>corosync-vqsim-3.1.9-2.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">43a5a53803c8f16b9509f7cdadfde1b0326847e0cd1f5e0f730c397c7d229437</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13857</id>
    <title>Important: dovecot security update</title>
    <issued date="2026-05-05 00:00:00"/>
    <updated date="2026-05-06 21:14:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.   

Security Fix(es):  

  * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032)
  * dovecot: denial of service via crafted message before authentication (CVE-2026-27858)
  * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13857" id="RHSA-2026:13857" type="rhsa" title="RHSA-2026:13857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59032" id="CVE-2025-59032" type="cve" title="CVE-2025-59032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27857" id="CVE-2026-27857" type="cve" title="CVE-2026-27857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27858" id="CVE-2026-27858" type="cve" title="CVE-2026-27858"/>
      <reference href="https://bugzilla.redhat.com/2452172" id="2452172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452175" id="2452175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452179" id="2452179" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-13857.html" id="ALSA-2026:13857" type="self" title="ALSA-2026:13857"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="dovecot-devel" version="2.3.16" release="15.el9_7.1" epoch="1" arch="s390x" src="dovecot-2.3.16-15.el9_7.1.src.rpm">
          <filename>dovecot-devel-2.3.16-15.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">0c764e54404277b8bd7b54d29f54a7923b3e6ba9189f8322354155d97fd07930</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1408</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:05:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1408" id="RHSA-2026:1408" type="rhsa" title="RHSA-2026:1408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1408.html" id="ALSA-2026:1408" type="self" title="ALSA-2026:1408"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3.12-test" version="3.12.12" release="4.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.src.rpm">
          <filename>python3.12-test-3.12.12-4.el9_7.s390x.rpm</filename>
          <sum type="sha256">55b4824872eb589027843217e6286bf151e869b48aeb6d3402fbdd94d9299a94</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="4.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.src.rpm">
          <filename>python3.12-idle-3.12.12-4.el9_7.s390x.rpm</filename>
          <sum type="sha256">7e3027d0b7e6a9ac0eea955aa8573f5ba05cb85102de9c8537ceef47eb05a3e2</sum>
        </package>
        <package name="python3.12-debug" version="3.12.12" release="4.el9_7" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.src.rpm">
          <filename>python3.12-debug-3.12.12-4.el9_7.s390x.rpm</filename>
          <sum type="sha256">baaf22e259d17194d1c01300d3ec045afebf3f5651992e2bb0abff68165008d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1410</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:02:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1410" id="RHSA-2026:1410" type="rhsa" title="RHSA-2026:1410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1410.html" id="ALSA-2026:1410" type="self" title="ALSA-2026:1410"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3.11-test" version="3.11.13" release="5.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el9_7.src.rpm">
          <filename>python3.11-test-3.11.13-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">66c839f2eb447f0a39a967cd0cf7fedeace10ec2da3c7c8cb53073fbbfee1613</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="5.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el9_7.src.rpm">
          <filename>python3.11-idle-3.11.13-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">b4d419d699dd2be8688da854a5b629bcfc01889aaa78edfb7ebdb9427630f59b</sum>
        </package>
        <package name="python3.11-debug" version="3.11.13" release="5.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el9_7.src.rpm">
          <filename>python3.11-debug-3.11.13-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">d0e343fd11910c755ebb731662528417677c07e987186ef30bfff77f55f69444</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1478</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2026-01-28 00:00:00"/>
    <updated date="2026-01-28 19:56:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1478" id="RHSA-2026:1478" type="rhsa" title="RHSA-2026:1478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1478.html" id="ALSA-2026:1478" type="self" title="ALSA-2026:1478"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3-test" version="3.9.25" release="3.el9_7" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.src.rpm">
          <filename>python3-test-3.9.25-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">4db6b0e1bf78b0cfb5cb0d6d4ac6aad69c34e53af5044c137a7c01602b8a6ab6</sum>
        </package>
        <package name="python3-debug" version="3.9.25" release="3.el9_7" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.src.rpm">
          <filename>python3-debug-3.9.25-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">5ba57db28100186771e832570355d641a3f89532c531061f0751d49000d8c457</sum>
        </package>
        <package name="python3-idle" version="3.9.25" release="3.el9_7" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.src.rpm">
          <filename>python3-idle-3.9.25-3.el9_7.s390x.rpm</filename>
          <sum type="sha256">d9b1829773db277fab82f163b31bfa9070cee545b4ab8676edb12d3542e938fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:14819</id>
    <title>Moderate: freeipmi security update</title>
    <issued date="2026-05-07 00:00:00"/>
    <updated date="2026-05-08 11:30:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeipmi security update</summary>
    <description>The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.  

Security Fix(es):  

  * freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:14819" id="RHSA-2026:14819" type="rhsa" title="RHSA-2026:14819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33554" id="CVE-2026-33554" type="cve" title="CVE-2026-33554"/>
      <reference href="https://bugzilla.redhat.com/2450778" id="2450778" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-14819.html" id="ALSA-2026:14819" type="self" title="ALSA-2026:14819"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="freeipmi-devel" version="1.6.17" release="1.el9_7" epoch="0" arch="s390x" src="freeipmi-1.6.17-1.el9_7.src.rpm">
          <filename>freeipmi-devel-1.6.17-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">bfac41e521a9decc324c9adbe093b2710a2212c6b95235e9a983c73b8bc22caf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:15887</id>
    <title>Important: openexr security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-13 08:41:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openexr security update</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  

Security Fix(es):  

  * OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file (CVE-2026-34588)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:15887" id="RHSA-2026:15887" type="rhsa" title="RHSA-2026:15887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34588" id="CVE-2026-34588" type="cve" title="CVE-2026-34588"/>
      <reference href="https://bugzilla.redhat.com/2455408" id="2455408" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-15887.html" id="ALSA-2026:15887" type="self" title="ALSA-2026:15887"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="openexr-devel" version="3.1.1" release="3.el9_7.2" epoch="0" arch="s390x" src="openexr-3.1.1-3.el9_7.2.src.rpm">
          <filename>openexr-devel-3.1.1-3.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">88352674693e4361d194a5b9e59e8fe85ad5c8def0e54999d340c51a2f49e2cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:15971</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-11 18:08:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)
  * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:15971" id="RHSA-2026:15971" type="rhsa" title="RHSA-2026:15971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14087" id="CVE-2025-14087" type="cve" title="CVE-2025-14087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14512" id="CVE-2025-14512" type="cve" title="CVE-2025-14512"/>
      <reference href="https://bugzilla.redhat.com/2419093" id="2419093" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2421339" id="2421339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-15971.html" id="ALSA-2026:15971" type="self" title="ALSA-2026:15971"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="glib2-static" version="2.68.4" release="18.el9_7.2" epoch="0" arch="s390x" src="glib2-2.68.4-18.el9_7.2.src.rpm">
          <filename>glib2-static-2.68.4-18.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">0689474f3315ca4529754017e2a53117c7b39d2aaefb0c249dcb87671e64a9c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1617</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-06 08:24:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568)
  * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)
  * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1617" id="RHSA-2026:1617" type="rhsa" title="RHSA-2026:1617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38568" id="CVE-2025-38568" type="cve" title="CVE-2025-38568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40154" id="CVE-2025-40154" type="cve" title="CVE-2025-40154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40251" id="CVE-2025-40251" type="cve" title="CVE-2025-40251"/>
      <reference href="https://bugzilla.redhat.com/2389507" id="2389507" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414494" id="2414494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418892" id="2418892" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1617.html" id="ALSA-2026:1617" type="self" title="ALSA-2026:1617"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">ad7d83cd1406842e01be10fa9d86d3747b8bbfc097be5509439bcb72d8c5a061</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.27.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">bf9fd86d4870f3c38b88d6c536fb8eed30f8b931eb7696a57a28743c69c0c19e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16206</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-12 00:00:00"/>
    <updated date="2026-05-20 00:50:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16206" id="RHSA-2026:16206" type="rhsa" title="RHSA-2026:16206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/2467771" id="2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-16206.html" id="ALSA-2026:16206" type="self" title="ALSA-2026:16206"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.55.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">81cac20b38268c90a6c570b55e12fe4edf24d896c065bb7e84104fb477043eb5</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.55.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">948b82a498a0e293ba346372ccc41bedd6d04b55d9ca9240569f3fe660d08013</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16482</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2026-05-12 00:00:00"/>
    <updated date="2026-05-16 06:50:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952)
  * freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986)
  * freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951)
  * freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775)
  * freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885)
  * freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884)
  * freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883)
  * FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16482" id="RHSA-2026:16482" type="rhsa" title="RHSA-2026:16482"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25952" id="CVE-2026-25952" type="cve" title="CVE-2026-25952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26986" id="CVE-2026-26986" type="cve" title="CVE-2026-26986"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27951" id="CVE-2026-27951" type="cve" title="CVE-2026-27951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-29775" id="CVE-2026-29775" type="cve" title="CVE-2026-29775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31883" id="CVE-2026-31883" type="cve" title="CVE-2026-31883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31884" id="CVE-2026-31884" type="cve" title="CVE-2026-31884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31885" id="CVE-2026-31885" type="cve" title="CVE-2026-31885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33985" id="CVE-2026-33985" type="cve" title="CVE-2026-33985"/>
      <reference href="https://bugzilla.redhat.com/2442768" id="2442768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442782" id="2442782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442783" id="2442783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447379" id="2447379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447383" id="2447383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447385" id="2447385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447386" id="2447386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453217" id="2453217" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-16482.html" id="ALSA-2026:16482" type="self" title="ALSA-2026:16482"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libwinpr-devel" version="2.11.7" release="1.el9_7.7" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.7.src.rpm">
          <filename>libwinpr-devel-2.11.7-1.el9_7.7.s390x.rpm</filename>
          <sum type="sha256">55515246ccf85418115dec240c78020e8d61edc88e8efbf32c93e95c31160676</sum>
        </package>
        <package name="freerdp-devel" version="2.11.7" release="1.el9_7.7" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.7.src.rpm">
          <filename>freerdp-devel-2.11.7-1.el9_7.7.s390x.rpm</filename>
          <sum type="sha256">c1c8947e6254a948eda31eb4cbb2fcddc9665a29a79a34874f3c38f879d6a9f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16693</id>
    <title>Important: jq security update</title>
    <issued date="2026-05-13 00:00:00"/>
    <updated date="2026-05-14 08:55:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979)
  * jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16693" id="RHSA-2026:16693" type="rhsa" title="RHSA-2026:16693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39979" id="CVE-2026-39979" type="cve" title="CVE-2026-39979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40164" id="CVE-2026-40164" type="cve" title="CVE-2026-40164"/>
      <reference href="https://bugzilla.redhat.com/2458077" id="2458077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458084" id="2458084" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-16693.html" id="ALSA-2026:16693" type="self" title="ALSA-2026:16693"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="jq-devel" version="1.6" release="19.el9_7.0.2" epoch="0" arch="s390x" src="jq-1.6-19.el9_7.0.2.src.rpm">
          <filename>jq-devel-1.6-19.el9_7.0.2.s390x.rpm</filename>
          <sum type="sha256">a934aac8200ebdaabee42f82f033ddfed9f9add3f1293069286fdaea4315512e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18029</id>
    <title>Critical: nginx security update</title>
    <issued date="2026-05-18 00:00:00"/>
    <updated date="2026-05-18 17:03:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18029" id="RHSA-2026:18029" type="rhsa" title="RHSA-2026:18029"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42945" id="CVE-2026-42945" type="cve" title="CVE-2026-42945"/>
      <reference href="https://bugzilla.redhat.com/2477116" id="2477116" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18029.html" id="ALSA-2026:18029" type="self" title="ALSA-2026:18029"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="nginx-mod-devel" version="1.20.1" release="24.el9_7.3.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.3.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.20.1-24.el9_7.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">109ff63561b23dfaf15aa8eb468adfe73547ad5742a1497cffaef2a42e3e341d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18039</id>
    <title>Important: ruby security update</title>
    <issued date="2026-05-18 00:00:00"/>
    <updated date="2026-05-19 21:33:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ruby security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * erb: ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18039" id="RHSA-2026:18039" type="rhsa" title="RHSA-2026:18039"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41316" id="CVE-2026-41316" type="cve" title="CVE-2026-41316"/>
      <reference href="https://bugzilla.redhat.com/2461369" id="2461369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18039.html" id="ALSA-2026:18039" type="self" title="ALSA-2026:18039"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="ruby-doc" version="3.0.7" release="166.el9_7" epoch="0" arch="noarch" src="ruby-3.0.7-166.el9_7.src.rpm">
          <filename>ruby-doc-3.0.7-166.el9_7.noarch.rpm</filename>
          <sum type="sha256">dc441426fb8f8b1808179658f6ed2f8315c547c138f967c0ed5905c8f7bc328e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18587</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-06-07 18:33:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bonding: check xdp prog when set bond mode (CVE-2025-22105)
  * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980)
  * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015)
  * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097)
  * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166)
  * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279)
  * kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails (CVE-2025-38400)
  * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405)
  * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441)
  * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470)
  * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866)
  * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134)
  * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040)
  * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18587" id="RHSA-2026:18587" type="rhsa" title="RHSA-2026:18587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22105" id="CVE-2025-22105" type="cve" title="CVE-2025-22105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37980" id="CVE-2025-37980" type="cve" title="CVE-2025-37980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38015" id="CVE-2025-38015" type="cve" title="CVE-2025-38015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38097" id="CVE-2025-38097" type="cve" title="CVE-2025-38097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38166" id="CVE-2025-38166" type="cve" title="CVE-2025-38166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38279" id="CVE-2025-38279" type="cve" title="CVE-2025-38279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38400" id="CVE-2025-38400" type="cve" title="CVE-2025-38400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38405" id="CVE-2025-38405" type="cve" title="CVE-2025-38405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38441" id="CVE-2025-38441" type="cve" title="CVE-2025-38441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38470" id="CVE-2025-38470" type="cve" title="CVE-2025-38470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39866" id="CVE-2025-39866" type="cve" title="CVE-2025-39866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40134" id="CVE-2025-40134" type="cve" title="CVE-2025-40134"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23040" id="CVE-2026-23040" type="cve" title="CVE-2026-23040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23243" id="CVE-2026-23243" type="cve" title="CVE-2026-23243"/>
      <reference href="https://bugzilla.redhat.com/2360247" id="2360247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367614" id="2367614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373343" id="2373343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376060" id="2376060" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376065" id="2376065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379178" id="2379178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383397" id="2383397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383399" id="2383399" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383478" id="2383478" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383906" id="2383906" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396940" id="2396940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414468" id="2414468" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436806" id="2436806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448594" id="2448594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18587.html" id="ALSA-2026:18587" type="self" title="ALSA-2026:18587"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.5.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">35804b303300e9e37c0bb178e4f3f91945ff24996967078f0029cc111dbe507c</sum>
        </package>
        <package name="libperf" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.5.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">c297dd15d28ac36604b890ec9d68c85528855b5c7bd25b72a9750b374dbf4463</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18597</id>
    <title>Low: NetworkManager security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>NetworkManager security update</summary>
    <description>NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.  

Security Fix(es):  

  * networkmanagr: NetworkManager File Access (CVE-2025-9615)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18597" id="RHSA-2026:18597" type="rhsa" title="RHSA-2026:18597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9615" id="CVE-2025-9615" type="cve" title="CVE-2025-9615"/>
      <reference href="https://bugzilla.redhat.com/2391503" id="2391503" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18597.html" id="ALSA-2026:18597" type="self" title="ALSA-2026:18597"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="NetworkManager-libnm-devel" version="1.54.3" release="2.el9" epoch="1" arch="s390x" src="NetworkManager-1.54.3-2.el9.src.rpm">
          <filename>NetworkManager-libnm-devel-1.54.3-2.el9.s390x.rpm</filename>
          <sum type="sha256">ca643b300e6ab33796487357dcb67f2861dbdb054d83058e7e77bfffce5a95c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18748</id>
    <title>Moderate: libvirt security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:29:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvirt security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.  

Security Fix(es):  

  * libvirt: Denial of service in XML parsing (CVE-2025-12748)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18748" id="RHSA-2026:18748" type="rhsa" title="RHSA-2026:18748"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12748" id="CVE-2025-12748" type="cve" title="CVE-2025-12748"/>
      <reference href="https://bugzilla.redhat.com/2413801" id="2413801" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18748.html" id="ALSA-2026:18748" type="self" title="ALSA-2026:18748"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libvirt-docs" version="11.10.0" release="12.el9_8.alma.1" epoch="0" arch="s390x" src="libvirt-11.10.0-12.el9_8.alma.1.src.rpm">
          <filename>libvirt-docs-11.10.0-12.el9_8.alma.1.s390x.rpm</filename>
          <sum type="sha256">08f7649c27a971bf75eac7b4f92735cd31dfd263f0a1a5568bc9a00c566ac288</sum>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" version="11.10.0" release="12.el9_8.alma.1" epoch="0" arch="s390x" src="libvirt-11.10.0-12.el9_8.alma.1.src.rpm">
          <filename>libvirt-daemon-plugin-sanlock-11.10.0-12.el9_8.alma.1.s390x.rpm</filename>
          <sum type="sha256">1ea74865bda9c40bca794499eecdabf5fbff55b1689a42e62a690f226ddd5861</sum>
        </package>
        <package name="libvirt-devel" version="11.10.0" release="12.el9_8.alma.1" epoch="0" arch="s390x" src="libvirt-11.10.0-12.el9_8.alma.1.src.rpm">
          <filename>libvirt-devel-11.10.0-12.el9_8.alma.1.s390x.rpm</filename>
          <sum type="sha256">f667cff5bf2dbb87ef3e230a88b42c27e86292b9873ed9e8e4facf41c1fd94e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18786</id>
    <title>Important: bind security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:30:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18786" id="RHSA-2026:18786" type="rhsa" title="RHSA-2026:18786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8677" id="CVE-2025-8677" type="cve" title="CVE-2025-8677"/>
      <reference href="https://bugzilla.redhat.com/2405830" id="2405830" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18786.html" id="ALSA-2026:18786" type="self" title="ALSA-2026:18786"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="bind-doc" version="9.16.23" release="40.el9_8.1" epoch="32" arch="noarch" src="bind-9.16.23-40.el9_8.1.src.rpm">
          <filename>bind-doc-9.16.23-40.el9_8.1.noarch.rpm</filename>
          <sum type="sha256">7a708ea0e5ade26de56d37e766f45520e410ae5dad31b2b35508a727f6a1907b</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="40.el9_8.1" epoch="32" arch="s390x" src="bind-9.16.23-40.el9_8.1.src.rpm">
          <filename>bind-devel-9.16.23-40.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">a0fdc17175568f0948f5e1e7d915d18e7f7c05aa1363c3d676a724197802682e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18824</id>
    <title>Moderate: luksmeta security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>luksmeta security update</summary>
    <description>LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in AlmaLinux.  

Security Fix(es):  

  * luksmeta: Data corruption when handling LUKS1 partitions with luksmeta (CVE-2025-11568)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18824" id="RHSA-2026:18824" type="rhsa" title="RHSA-2026:18824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11568" id="CVE-2025-11568" type="cve" title="CVE-2025-11568"/>
      <reference href="https://bugzilla.redhat.com/2404244" id="2404244" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18824.html" id="ALSA-2026:18824" type="self" title="ALSA-2026:18824"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libluksmeta-devel" version="10" release="1.el9" epoch="0" arch="s390x" src="luksmeta-10-1.el9.src.rpm">
          <filename>libluksmeta-devel-10-1.el9.s390x.rpm</filename>
          <sum type="sha256">aed1a7ea7b38d4c2594d476e190225e33f0f8758215fc71883b4a24c6b175aa8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18931</id>
    <title>Moderate: unbound security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: DNSBomb vulnerability (CVE-2024-33655)
  * unbound: Unbound domain hijacking via promiscuous records (CVE-2025-11411)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18931" id="RHSA-2026:18931" type="rhsa" title="RHSA-2026:18931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33655" id="CVE-2024-33655" type="cve" title="CVE-2024-33655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11411" id="CVE-2025-11411" type="cve" title="CVE-2025-11411"/>
      <reference href="https://bugzilla.redhat.com/2279942" id="2279942" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405706" id="2405706" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18931.html" id="ALSA-2026:18931" type="self" title="ALSA-2026:18931"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="unbound-devel" version="1.24.2" release="2.el9" epoch="0" arch="s390x" src="unbound-1.24.2-2.el9.src.rpm">
          <filename>unbound-devel-1.24.2-2.el9.s390x.rpm</filename>
          <sum type="sha256">a13a775c4bc49044761435e2e039a1e088338012726df7d28c6946c90a394fdf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1913</id>
    <title>Moderate: util-linux security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-10 07:54:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>util-linux security update</summary>
    <description>The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.  

Security Fix(es):  

  * util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1913" id="RHSA-2026:1913" type="rhsa" title="RHSA-2026:1913"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14104" id="CVE-2025-14104" type="cve" title="CVE-2025-14104"/>
      <reference href="https://bugzilla.redhat.com/2419369" id="2419369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1913.html" id="ALSA-2026:1913" type="self" title="ALSA-2026:1913"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libsmartcols-devel" version="2.37.4" release="21.el9_7" epoch="0" arch="s390x" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>libsmartcols-devel-2.37.4-21.el9_7.s390x.rpm</filename>
          <sum type="sha256">14b8d12e65c9c2079c4643e0a3d9668290de38b601b75e9fe6c5d4ad020e3637</sum>
        </package>
        <package name="libfdisk-devel" version="2.37.4" release="21.el9_7" epoch="0" arch="s390x" src="util-linux-2.37.4-21.el9_7.src.rpm">
          <filename>libfdisk-devel-2.37.4-21.el9_7.s390x.rpm</filename>
          <sum type="sha256">a7fd0663ffb5c5f3220108b2b1b6ffcafec52211510dccd631f0eb2f08c438f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19175</id>
    <title>Important: python3.11 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:29:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)
  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19175" id="RHSA-2026:19175" type="rhsa" title="RHSA-2026:19175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19175.html" id="ALSA-2026:19175" type="self" title="ALSA-2026:19175"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="python3.11-idle" version="3.11.13" release="9.el9_8" epoch="0" arch="s390x" src="python3.11-3.11.13-9.el9_8.src.rpm">
          <filename>python3.11-idle-3.11.13-9.el9_8.s390x.rpm</filename>
          <sum type="sha256">86439ee988129d48b9f2af879a2e166858b4a988deefa3d472f6fd89a4f10d1f</sum>
        </package>
        <package name="python3.11-test" version="3.11.13" release="9.el9_8" epoch="0" arch="s390x" src="python3.11-3.11.13-9.el9_8.src.rpm">
          <filename>python3.11-test-3.11.13-9.el9_8.s390x.rpm</filename>
          <sum type="sha256">bd04c32f68bfbc05a5f544d9ae82498441349a226abe5d4e59e20f3f9d652206</sum>
        </package>
        <package name="python3.11-debug" version="3.11.13" release="9.el9_8" epoch="0" arch="s390x" src="python3.11-3.11.13-9.el9_8.src.rpm">
          <filename>python3.11-debug-3.11.13-9.el9_8.s390x.rpm</filename>
          <sum type="sha256">eb04c613564f64c7bd3acf504e5c290e88cf35e2d90bd5f43dd96856214a3e08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19176</id>
    <title>Important: python3.14 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:33:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.14 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)
  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)
  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)
  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)
  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)
  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)
  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)
  * python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. (CVE-2026-5713)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19176" id="RHSA-2026:19176" type="rhsa" title="RHSA-2026:19176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0865" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1502" id="CVE-2026-1502" type="cve" title="CVE-2026-1502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2297" id="CVE-2026-2297" type="cve" title="CVE-2026-2297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3644" id="CVE-2026-3644" type="cve" title="CVE-2026-3644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4224" id="CVE-2026-4224" type="cve" title="CVE-2026-4224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5713" id="CVE-2026-5713" type="cve" title="CVE-2026-5713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2431367" id="2431367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444691" id="2444691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448168" id="2448168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448181" id="2448181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457409" id="2457409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458239" id="2458239" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19176.html" id="ALSA-2026:19176" type="self" title="ALSA-2026:19176"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="python3.14-freethreading-idle" version="3.14.4" release="2.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.4-2.el9_8.src.rpm">
          <filename>python3.14-freethreading-idle-3.14.4-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">0cf675cb6bdf12eec857deb6be189d44d5de3a882311e0ef47a8ce391c3ca836</sum>
        </package>
        <package name="python3.14-freethreading-debug" version="3.14.4" release="2.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.4-2.el9_8.src.rpm">
          <filename>python3.14-freethreading-debug-3.14.4-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">0fc73e2b439cc3d1df2684f8cf9fba0fd07e37f8807cc3a27cd085868736c613</sum>
        </package>
        <package name="python3.14-freethreading-devel" version="3.14.4" release="2.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.4-2.el9_8.src.rpm">
          <filename>python3.14-freethreading-devel-3.14.4-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">28be3b058ba0b1a7c37924349582b7a3a7b38bc1831a747f0fa5117dcd80345d</sum>
        </package>
        <package name="python3.14-freethreading" version="3.14.4" release="2.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.4-2.el9_8.src.rpm">
          <filename>python3.14-freethreading-3.14.4-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">2eba6fdafb5b458b8e36d3f0b0f7016f67bf5d56bd0f936ffe0c41e444876a11</sum>
        </package>
        <package name="python3.14-freethreading-libs" version="3.14.4" release="2.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.4-2.el9_8.src.rpm">
          <filename>python3.14-freethreading-libs-3.14.4-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">4febb46d2caf801ae168ff5f2c0d9f473ffa7b7283f5252660a893712b42422f</sum>
        </package>
        <package name="python3.14-idle" version="3.14.4" release="2.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.4-2.el9_8.src.rpm">
          <filename>python3.14-idle-3.14.4-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">81aab0ee5afd9488155d32b4ec7dba3ec7168052c122ce84c25c690ba9206f53</sum>
        </package>
        <package name="python3.14-debug" version="3.14.4" release="2.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.4-2.el9_8.src.rpm">
          <filename>python3.14-debug-3.14.4-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">87549f24489334e41db9dbccffc09863e388408fd33931e95a5a66df948914c4</sum>
        </package>
        <package name="python3.14-freethreading-tkinter" version="3.14.4" release="2.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.4-2.el9_8.src.rpm">
          <filename>python3.14-freethreading-tkinter-3.14.4-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">bbde22d1f1e19d53b59c3a2cbf5773b00524993d13d663d9d04033259b2f8933</sum>
        </package>
        <package name="python3.14-test" version="3.14.4" release="2.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.4-2.el9_8.src.rpm">
          <filename>python3.14-test-3.14.4-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">eeba54463d2fbb361fe1ed30609964404a0b12f7fdc087831a9202d26a75e883</sum>
        </package>
        <package name="python3.14-freethreading-test" version="3.14.4" release="2.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.4-2.el9_8.src.rpm">
          <filename>python3.14-freethreading-test-3.14.4-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">fb5272eb2996b260deff00c60ebbaa8827f0da0d882a3e0e00f622a87b193f71</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19177</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:29:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)
  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)
  * cpython: Out-of-memory when loading Plist (CVE-2025-13837)
  * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)
  * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)
  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)
  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)
  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)
  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)
  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)
  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19177" id="RHSA-2026:19177" type="rhsa" title="RHSA-2026:19177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13837" id="CVE-2025-13837" type="cve" title="CVE-2025-13837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15282" id="CVE-2025-15282" type="cve" title="CVE-2025-15282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6075" id="CVE-2025-6075" type="cve" title="CVE-2025-6075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0672" id="CVE-2026-0672" type="cve" title="CVE-2026-0672"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1502" id="CVE-2026-1502" type="cve" title="CVE-2026-1502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2297" id="CVE-2026-2297" type="cve" title="CVE-2026-2297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3644" id="CVE-2026-3644" type="cve" title="CVE-2026-3644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4224" id="CVE-2026-4224" type="cve" title="CVE-2026-4224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2408891" id="2408891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418084" id="2418084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431366" id="2431366" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431374" id="2431374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444691" id="2444691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448168" id="2448168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448181" id="2448181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457409" id="2457409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19177.html" id="ALSA-2026:19177" type="self" title="ALSA-2026:19177"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="python3.12-test" version="3.12.13" release="2.el9_8" epoch="0" arch="s390x" src="python3.12-3.12.13-2.el9_8.src.rpm">
          <filename>python3.12-test-3.12.13-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">174bb70361a8e949151bb259ad03d9ddfb14ddffa264f857d167a97b7ac841cd</sum>
        </package>
        <package name="python3.12-idle" version="3.12.13" release="2.el9_8" epoch="0" arch="s390x" src="python3.12-3.12.13-2.el9_8.src.rpm">
          <filename>python3.12-idle-3.12.13-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">2f5f1a8ffba92513dc569eedfbdbe50932ddf36df610fed45ecd7160b151c94d</sum>
        </package>
        <package name="python3.12-debug" version="3.12.13" release="2.el9_8" epoch="0" arch="s390x" src="python3.12-3.12.13-2.el9_8.src.rpm">
          <filename>python3.12-debug-3.12.13-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">6071f39ac4d02c6a64adffcac3cf436840123fa1eb19ab6258ee6d831daa2e63</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19180</id>
    <title>Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920)
  * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082)
  * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085)
  * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921)
  * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19180" id="RHSA-2026:19180" type="rhsa" title="RHSA-2026:19180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2920" id="CVE-2026-2920" type="cve" title="CVE-2026-2920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2921" id="CVE-2026-2921" type="cve" title="CVE-2026-2921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2922" id="CVE-2026-2922" type="cve" title="CVE-2026-2922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2923" id="CVE-2026-2923" type="cve" title="CVE-2026-2923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3082" id="CVE-2026-3082" type="cve" title="CVE-2026-3082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3083" id="CVE-2026-3083" type="cve" title="CVE-2026-3083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3085" id="CVE-2026-3085" type="cve" title="CVE-2026-3085"/>
      <reference href="https://bugzilla.redhat.com/2447490" id="2447490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447492" id="2447492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447495" id="2447495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447496" id="2447496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447498" id="2447498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447500" id="2447500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447503" id="2447503" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19180.html" id="ALSA-2026:19180" type="self" title="ALSA-2026:19180"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.22.12" release="7.el9_8" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-7.el9_8.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.s390x.rpm</filename>
          <sum type="sha256">e28e19a58b21d83e636ee27c43492535842521f32a805e59af16d020068ae8bf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19200</id>
    <title>Moderate: corosync security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-06-23 11:33:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>corosync security update</summary>
    <description>The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.  

Security Fix(es):  

  * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
  * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19200" id="RHSA-2026:19200" type="rhsa" title="RHSA-2026:19200"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35091" id="CVE-2026-35091" type="cve" title="CVE-2026-35091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35092" id="CVE-2026-35092" type="cve" title="CVE-2026-35092"/>
      <reference href="https://bugzilla.redhat.com/2453813" id="2453813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453814" id="2453814" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19200.html" id="ALSA-2026:19200" type="self" title="ALSA-2026:19200"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="corosync-vqsim" version="3.1.10" release="1.el9_8.1" epoch="0" arch="s390x" src="corosync-3.1.10-1.el9_8.1.src.rpm">
          <filename>corosync-vqsim-3.1.10-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">018bfb509179a82900296f272fc097c1ecd6c5c5cdf6545649f363e11273c56f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19208</id>
    <title>Moderate: freeipmi security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeipmi security update</summary>
    <description>The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.  

Security Fix(es):  

  * freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19208" id="RHSA-2026:19208" type="rhsa" title="RHSA-2026:19208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33554" id="CVE-2026-33554" type="cve" title="CVE-2026-33554"/>
      <reference href="https://bugzilla.redhat.com/2450778" id="2450778" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19208.html" id="ALSA-2026:19208" type="self" title="ALSA-2026:19208"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="freeipmi-devel" version="1.6.17" release="1.el9_8" epoch="0" arch="s390x" src="freeipmi-1.6.17-1.el9_8.src.rpm">
          <filename>freeipmi-devel-1.6.17-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">6edfdd3c1e89f5d1892b3f28ad22ecdf086a018e2df8ff92d7290951c4395eee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19216</id>
    <title>Important: python3.9 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:29:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)
  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19216" id="RHSA-2026:19216" type="rhsa" title="RHSA-2026:19216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19216.html" id="ALSA-2026:19216" type="self" title="ALSA-2026:19216"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="python3-test" version="3.9.25" release="7.el9_8" epoch="0" arch="s390x" src="python3.9-3.9.25-7.el9_8.src.rpm">
          <filename>python3-test-3.9.25-7.el9_8.s390x.rpm</filename>
          <sum type="sha256">3b811b67d938bc2c4f8cb8e0ad1e5800baedda7f54c9b907518533b4f1d63406</sum>
        </package>
        <package name="python3-idle" version="3.9.25" release="7.el9_8" epoch="0" arch="s390x" src="python3.9-3.9.25-7.el9_8.src.rpm">
          <filename>python3-idle-3.9.25-7.el9_8.s390x.rpm</filename>
          <sum type="sha256">b699204cace8fa47def46ebb571dd45354932471331ff6fb8234c57c132d63fd</sum>
        </package>
        <package name="python3-debug" version="3.9.25" release="7.el9_8" epoch="0" arch="s390x" src="python3.9-3.9.25-7.el9_8.src.rpm">
          <filename>python3-debug-3.9.25-7.el9_8.s390x.rpm</filename>
          <sum type="sha256">cd943682e54af8bb6ce5cc9d98b5d0bbdf9c6add46fb07b4c39f634d059dc98d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19225</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:29:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060)
  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)
  * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677)
  * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19225" id="RHSA-2026:19225" type="rhsa" title="RHSA-2026:19225"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23060" id="CVE-2026-23060" type="cve" title="CVE-2026-23060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31677" id="CVE-2026-31677" type="cve" title="CVE-2026-31677"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/2436779" id="2436779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460538" id="2460538" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461763" id="2461763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467771" id="2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19225.html" id="ALSA-2026:19225" type="self" title="ALSA-2026:19225"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.5.3.el9_8.s390x.rpm</filename>
          <sum type="sha256">db6233d5c1cbc8865a70b660e2b1f741152527d2ad9f24fd9fd4c930d31437b5</sum>
        </package>
        <package name="libperf" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.5.3.el9_8.s390x.rpm</filename>
          <sum type="sha256">f6a77ba4e1c3e175b43da53b18b955de06e30df7188541b295e82c26330ed8fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19343</id>
    <title>Important: xorg-x11-server security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:30:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19343" id="RHSA-2026:19343" type="rhsa" title="RHSA-2026:19343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19343.html" id="ALSA-2026:19343" type="self" title="ALSA-2026:19343"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="34.el9_8" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-34.el9_8.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-34.el9_8.noarch.rpm</filename>
          <sum type="sha256">bb78b968af0f2f81e05afecea1ae46d98b6de0d70d3568bef2d7a8d1c64117a1</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="34.el9_8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-34.el9_8.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-34.el9_8.s390x.rpm</filename>
          <sum type="sha256">fa4e224b60a6b2fafa161a92f76f5b5c5e8a8cbaea713766fda2cdd3162da504</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19344</id>
    <title>Important: xorg-x11-server-Xwayland security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19344" id="RHSA-2026:19344" type="rhsa" title="RHSA-2026:19344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19344.html" id="ALSA-2026:19344" type="self" title="ALSA-2026:19344"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="xorg-x11-server-Xwayland-devel" version="24.1.9" release="4.el9_8" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-24.1.9-4.el9_8.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-24.1.9-4.el9_8.s390x.rpm</filename>
          <sum type="sha256">53066d085e7e008b95a2327e86cda5da7bd31c43097330a86c62e66d4a613ce3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19354</id>
    <title>Important: PackageKit security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>PackageKit security update</summary>
    <description>PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.  

Security Fix(es):  

  * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19354" id="RHSA-2026:19354" type="rhsa" title="RHSA-2026:19354"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41651" id="CVE-2026-41651" type="cve" title="CVE-2026-41651"/>
      <reference href="https://bugzilla.redhat.com/2460604" id="2460604" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19354.html" id="ALSA-2026:19354" type="self" title="ALSA-2026:19354"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="PackageKit-glib-devel" version="1.2.6" release="2.el9_8" epoch="0" arch="s390x" src="PackageKit-1.2.6-2.el9_8.src.rpm">
          <filename>PackageKit-glib-devel-1.2.6-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">e3bb3bb6da874061630675975b1064d5c6e267dd622b6fd29193baf1023ec6e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19358</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-07-02 11:46:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952)
  * freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986)
  * freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951)
  * freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775)
  * freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885)
  * freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884)
  * freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883)
  * FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19358" id="RHSA-2026:19358" type="rhsa" title="RHSA-2026:19358"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25952" id="CVE-2026-25952" type="cve" title="CVE-2026-25952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26986" id="CVE-2026-26986" type="cve" title="CVE-2026-26986"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27951" id="CVE-2026-27951" type="cve" title="CVE-2026-27951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-29775" id="CVE-2026-29775" type="cve" title="CVE-2026-29775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31883" id="CVE-2026-31883" type="cve" title="CVE-2026-31883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31884" id="CVE-2026-31884" type="cve" title="CVE-2026-31884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31885" id="CVE-2026-31885" type="cve" title="CVE-2026-31885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33985" id="CVE-2026-33985" type="cve" title="CVE-2026-33985"/>
      <reference href="https://bugzilla.redhat.com/2442768" id="2442768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442782" id="2442782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442783" id="2442783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447379" id="2447379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447383" id="2447383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447385" id="2447385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447386" id="2447386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453217" id="2453217" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19358.html" id="ALSA-2026:19358" type="self" title="ALSA-2026:19358"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="freerdp-devel" version="2.11.7" release="7.el9_8.3" epoch="2" arch="s390x" src="freerdp-2.11.7-7.el9_8.3.src.rpm">
          <filename>freerdp-devel-2.11.7-7.el9_8.3.s390x.rpm</filename>
          <sum type="sha256">0d6765ea38a8cbdf3c24b41a30e6ef675df701cd7e4f99a8cbd38327f311b189</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="7.el9_8.3" epoch="2" arch="s390x" src="freerdp-2.11.7-7.el9_8.3.src.rpm">
          <filename>libwinpr-devel-2.11.7-7.el9_8.3.s390x.rpm</filename>
          <sum type="sha256">348d3b4ac5e51b6ff7347914ae6131790ccf891aa53f306a5c6811761eadfff3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19359</id>
    <title>Important: openexr security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openexr security update</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  

Security Fix(es):  

  * OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file (CVE-2026-34588)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19359" id="RHSA-2026:19359" type="rhsa" title="RHSA-2026:19359"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34588" id="CVE-2026-34588" type="cve" title="CVE-2026-34588"/>
      <reference href="https://bugzilla.redhat.com/2455408" id="2455408" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19359.html" id="ALSA-2026:19359" type="self" title="ALSA-2026:19359"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="openexr-devel" version="3.1.1" release="3.el9_8.2" epoch="0" arch="s390x" src="openexr-3.1.1-3.el9_8.2.src.rpm">
          <filename>openexr-devel-3.1.1-3.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">97f3c4167b5c6bb9771b44a2f60818d160cd27d258334c623a47e3311a6ec78b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19361</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)
  * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19361" id="RHSA-2026:19361" type="rhsa" title="RHSA-2026:19361"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14087" id="CVE-2025-14087" type="cve" title="CVE-2025-14087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14512" id="CVE-2025-14512" type="cve" title="CVE-2025-14512"/>
      <reference href="https://bugzilla.redhat.com/2419093" id="2419093" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2421339" id="2421339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19361.html" id="ALSA-2026:19361" type="self" title="ALSA-2026:19361"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="glib2-static" version="2.68.4" release="19.el9_8.1" epoch="0" arch="s390x" src="glib2-2.68.4-19.el9_8.1.src.rpm">
          <filename>glib2-static-2.68.4-19.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">0c776a78c7285669a8d5a8f68d236034e6854f2155b98d495b5109a9d5f5c0fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19363</id>
    <title>Important: libtiff security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19363" id="RHSA-2026:19363" type="rhsa" title="RHSA-2026:19363"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4775" id="CVE-2026-4775" type="cve" title="CVE-2026-4775"/>
      <reference href="https://bugzilla.redhat.com/2450768" id="2450768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19363.html" id="ALSA-2026:19363" type="self" title="ALSA-2026:19363"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libtiff-tools" version="4.4.0" release="18.el9_8" epoch="0" arch="s390x" src="libtiff-4.4.0-18.el9_8.src.rpm">
          <filename>libtiff-tools-4.4.0-18.el9_8.s390x.rpm</filename>
          <sum type="sha256">ffcc3473ece550ca222246abc2df3ec06c5916ae712e0b989f76f1347970f4ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19364</id>
    <title>Important: dovecot security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.   

Security Fix(es):  

  * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032)
  * dovecot: denial of service via crafted message before authentication (CVE-2026-27858)
  * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19364" id="RHSA-2026:19364" type="rhsa" title="RHSA-2026:19364"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59032" id="CVE-2025-59032" type="cve" title="CVE-2025-59032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27857" id="CVE-2026-27857" type="cve" title="CVE-2026-27857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27858" id="CVE-2026-27858" type="cve" title="CVE-2026-27858"/>
      <reference href="https://bugzilla.redhat.com/2452172" id="2452172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452175" id="2452175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452179" id="2452179" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19364.html" id="ALSA-2026:19364" type="self" title="ALSA-2026:19364"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dovecot-devel" version="2.3.16" release="18.el9_8" epoch="1" arch="s390x" src="dovecot-2.3.16-18.el9_8.src.rpm">
          <filename>dovecot-devel-2.3.16-18.el9_8.s390x.rpm</filename>
          <sum type="sha256">5fc4ca48cb13320837014b8a7e09f9f28260f6df078b1786854424285fd6c89a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19365</id>
    <title>Important: jq security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979)
  * jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19365" id="RHSA-2026:19365" type="rhsa" title="RHSA-2026:19365"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39979" id="CVE-2026-39979" type="cve" title="CVE-2026-39979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40164" id="CVE-2026-40164" type="cve" title="CVE-2026-40164"/>
      <reference href="https://bugzilla.redhat.com/2458077" id="2458077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458084" id="2458084" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19365.html" id="ALSA-2026:19365" type="self" title="ALSA-2026:19365"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="jq-devel" version="1.6" release="19.el9_8.2" epoch="0" arch="s390x" src="jq-1.6-19.el9_8.2.src.rpm">
          <filename>jq-devel-1.6-19.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">c62d4768b38acf5e2211fbc27f053ba35504755b39ecac154cde984db66e8edc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19367</id>
    <title>Important: giflib update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>giflib update</summary>
    <description>Please update
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19367" id="RHSA-2026:19367" type="rhsa" title="RHSA-2026:19367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23868" id="CVE-2026-23868" type="cve" title="CVE-2026-23868"/>
      <reference href="https://bugzilla.redhat.com/2446207" id="2446207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19367.html" id="ALSA-2026:19367" type="self" title="ALSA-2026:19367"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="giflib-devel" version="5.2.1" release="10.el9_8.1" epoch="0" arch="s390x" src="giflib-5.2.1-10.el9_8.1.src.rpm">
          <filename>giflib-devel-5.2.1-10.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">6623f65e2ecafdccf1af1c838cb6785f712a96d67413d8bfd07619721423233d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19374</id>
    <title>Critical: nginx security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:28:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19374" id="RHSA-2026:19374" type="rhsa" title="RHSA-2026:19374"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42945" id="CVE-2026-42945" type="cve" title="CVE-2026-42945"/>
      <reference href="https://bugzilla.redhat.com/2477116" id="2477116" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19374.html" id="ALSA-2026:19374" type="self" title="ALSA-2026:19374"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="nginx-mod-devel" version="1.20.1" release="28.el9_8.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-28.el9_8.2.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.20.1-28.el9_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">30e51fe9852fefa5e54e39482e7d616d0cc4e7db685dbe3d3f02d80dcc8561a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1939</id>
    <title>Important: python3.12-wheel security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-10 07:52:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-wheel security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking (CVE-2026-24049)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1939" id="RHSA-2026:1939" type="rhsa" title="RHSA-2026:1939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24049" id="CVE-2026-24049" type="cve" title="CVE-2026-24049"/>
      <reference href="https://bugzilla.redhat.com/2431959" id="2431959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1939.html" id="ALSA-2026:1939" type="self" title="ALSA-2026:1939"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3.12-wheel-wheel" version="0.41.2" release="3.el9_7.1" epoch="0" arch="noarch" src="python3.12-wheel-0.41.2-3.el9_7.1.src.rpm">
          <filename>python3.12-wheel-wheel-0.41.2-3.el9_7.1.noarch.rpm</filename>
          <sum type="sha256">436b6074dfdf7f27a4a5213aa406d06839c5599bd4ffee848fcac89755ee127a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19568</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-20 00:00:00"/>
    <updated date="2026-06-07 18:33:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
  * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)
  * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)
  * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)
  * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
  * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
  * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
  * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
  * kernel: can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CVE-2026-31532)
  * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)
  * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)
  * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)
  * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)
  * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19568" id="RHSA-2026:19568" type="rhsa" title="RHSA-2026:19568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39766" id="CVE-2025-39766" type="cve" title="CVE-2025-39766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68741" id="CVE-2025-68741" type="cve" title="CVE-2025-68741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71116" id="CVE-2025-71116" type="cve" title="CVE-2025-71116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22984" id="CVE-2026-22984" type="cve" title="CVE-2026-22984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22990" id="CVE-2026-22990" type="cve" title="CVE-2026-22990"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23136" id="CVE-2026-23136" type="cve" title="CVE-2026-23136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23204" id="CVE-2026-23204" type="cve" title="CVE-2026-23204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23270" id="CVE-2026-23270" type="cve" title="CVE-2026-23270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23401" id="CVE-2026-23401" type="cve" title="CVE-2026-23401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31402" id="CVE-2026-31402" type="cve" title="CVE-2026-31402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31532" id="CVE-2026-31532" type="cve" title="CVE-2026-31532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31607" id="CVE-2026-31607" type="cve" title="CVE-2026-31607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43128" id="CVE-2026-43128" type="cve" title="CVE-2026-43128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43163" id="CVE-2026-43163" type="cve" title="CVE-2026-43163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46300" id="CVE-2026-46300" type="cve" title="CVE-2026-46300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46333" id="CVE-2026-46333" type="cve" title="CVE-2026-46333"/>
      <reference href="https://bugzilla.redhat.com/2394648" id="2394648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425046" id="2425046" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429602" id="2429602" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432389" id="2432389" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432400" id="2432400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439852" id="2439852" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439931" id="2439931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448745" id="2448745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453803" id="2453803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454844" id="2454844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461107" id="2461107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461521" id="2461521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467059" id="2467059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467144" id="2467144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467771" id="2467771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477015" id="2477015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477802" id="2477802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19568.html" id="ALSA-2026:19568" type="self" title="ALSA-2026:19568"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.10.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">84807fa8173ab3326521f367fffcd78d1fc0f0994c27e29808d4e5dcd77fd8d2</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.10.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">ea8dab30a584f174c8d551ea4f4d389907194acdc1911715a0889dbeffa32b3b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19610</id>
    <title>Important: libsndfile security update</title>
    <issued date="2026-05-20 00:00:00"/>
    <updated date="2026-05-26 12:28:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.   

Security Fix(es):  

  * libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19610" id="RHSA-2026:19610" type="rhsa" title="RHSA-2026:19610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-37555" id="CVE-2026-37555" type="cve" title="CVE-2026-37555"/>
      <reference href="https://bugzilla.redhat.com/2463856" id="2463856" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19610.html" id="ALSA-2026:19610" type="self" title="ALSA-2026:19610"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libsndfile-devel" version="1.0.31" release="9.el9_8.1" epoch="0" arch="s390x" src="libsndfile-1.0.31-9.el9_8.1.src.rpm">
          <filename>libsndfile-devel-1.0.31-9.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">e06c3cbd398f4ad36d9cd43474eb458be39131f491a2849fdbe061b8bffa03af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2039</id>
    <title>Important: fontforge security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-06 21:29:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fontforge security update</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.   

Security Fix(es):  

  * fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing (CVE-2025-15279)
  * fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing (CVE-2025-15269)
  * fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow (CVE-2025-15275)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2039" id="RHSA-2026:2039" type="rhsa" title="RHSA-2026:2039"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15269" id="CVE-2025-15269" type="cve" title="CVE-2025-15269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15275" id="CVE-2025-15275" type="cve" title="CVE-2025-15275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15279" id="CVE-2025-15279" type="cve" title="CVE-2025-15279"/>
      <reference href="https://bugzilla.redhat.com/2426421" id="2426421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426423" id="2426423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426429" id="2426429" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2039.html" id="ALSA-2026:2039" type="self" title="ALSA-2026:2039"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="fontforge" version="20201107" release="7.el9_7" epoch="0" arch="s390x" src="fontforge-20201107-7.el9_7.src.rpm">
          <filename>fontforge-20201107-7.el9_7.s390x.rpm</filename>
          <sum type="sha256">acf6b292ddf457351a598b2540ba7136db808efafa92c6747fb30f036755326a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2048</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-10 07:49:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. (CVE-2026-23530)
  * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability (CVE-2026-23884)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)
  * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution (CVE-2026-23533)
  * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. (CVE-2026-23531)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow (CVE-2026-23534)
  * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow (CVE-2026-23532)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2048" id="RHSA-2026:2048" type="rhsa" title="RHSA-2026:2048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23530" id="CVE-2026-23530" type="cve" title="CVE-2026-23530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23531" id="CVE-2026-23531" type="cve" title="CVE-2026-23531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23532" id="CVE-2026-23532" type="cve" title="CVE-2026-23532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23533" id="CVE-2026-23533" type="cve" title="CVE-2026-23533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23534" id="CVE-2026-23534" type="cve" title="CVE-2026-23534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23883" id="CVE-2026-23883" type="cve" title="CVE-2026-23883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23884" id="CVE-2026-23884" type="cve" title="CVE-2026-23884"/>
      <reference href="https://bugzilla.redhat.com/2430877" id="2430877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430880" id="2430880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430885" id="2430885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430886" id="2430886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430887" id="2430887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430888" id="2430888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430891" id="2430891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2048.html" id="ALSA-2026:2048" type="self" title="ALSA-2026:2048"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="freerdp-devel" version="2.11.7" release="1.el9_7.1" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.1.src.rpm">
          <filename>freerdp-devel-2.11.7-1.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">21167e5d5a7a6ad971ccfeb12710bb95eb785a0915590b67fce48fc24f443782</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="1.el9_7.1" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.1.src.rpm">
          <filename>libwinpr-devel-2.11.7-1.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">bc2dcb96ea4d92522994a5a6e9f7a20622fb68555c435832da032c86dbb5ddf6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20597</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-06-30 13:40:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Incorrect DNS response parsing via crafted DNS server response (CVE-2026-4437)
  * glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions (CVE-2026-4438)
  * glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20597" id="RHSA-2026:20597" type="rhsa" title="RHSA-2026:20597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4046" id="CVE-2026-4046" type="cve" title="CVE-2026-4046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4437" id="CVE-2026-4437" type="cve" title="CVE-2026-4437"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4438" id="CVE-2026-4438" type="cve" title="CVE-2026-4438"/>
      <reference href="https://bugzilla.redhat.com/2449777" id="2449777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2449783" id="2449783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453117" id="2453117" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-20597.html" id="ALSA-2026:20597" type="self" title="ALSA-2026:20597"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="nss_db" version="2.34" release="270.el9_8" epoch="0" arch="s390x" src="glibc-2.34-270.el9_8.src.rpm">
          <filename>nss_db-2.34-270.el9_8.s390x.rpm</filename>
          <sum type="sha256">391226d16daae5f785a2cd4be4d8cf001e911df2f47f897467ca092b903797cc</sum>
        </package>
        <package name="glibc-static" version="2.34" release="270.el9_8" epoch="0" arch="s390x" src="glibc-2.34-270.el9_8.src.rpm">
          <filename>glibc-static-2.34-270.el9_8.s390x.rpm</filename>
          <sum type="sha256">51af86ba5e79776d1469556ffb69835f5d6159a3e937df8120ad5a2067ee5210</sum>
        </package>
        <package name="nss_hesiod" version="2.34" release="270.el9_8" epoch="0" arch="s390x" src="glibc-2.34-270.el9_8.src.rpm">
          <filename>nss_hesiod-2.34-270.el9_8.s390x.rpm</filename>
          <sum type="sha256">675e3b1ccdb510599ec1b1b33426a86ecbb9c0f107120e0b7bd5d13007dddeb7</sum>
        </package>
        <package name="glibc-nss-devel" version="2.34" release="270.el9_8" epoch="0" arch="s390x" src="glibc-2.34-270.el9_8.src.rpm">
          <filename>glibc-nss-devel-2.34-270.el9_8.s390x.rpm</filename>
          <sum type="sha256">f56eb3ec4ef5fda822c57bd3b3398d0ef7778d3d08e2b1c0c8bd8dc5b94b353f</sum>
        </package>
        <package name="glibc-benchtests" version="2.34" release="270.el9_8" epoch="0" arch="s390x" src="glibc-2.34-270.el9_8.src.rpm">
          <filename>glibc-benchtests-2.34-270.el9_8.s390x.rpm</filename>
          <sum type="sha256">fe9d3f4d0bbd0421ac7299a74cdc87fadb31b63f262cb1fda9853a9df4eb1610</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21293</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-28 12:37:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.127 and .NET Runtime 8.0.27.Security Fix(es):  

  * serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization (CVE-2026-34043)
  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21293" id="RHSA-2026:21293" type="rhsa" title="RHSA-2026:21293"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34043" id="CVE-2026-34043" type="cve" title="CVE-2026-34043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2453284" id="2453284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-21293.html" id="ALSA-2026:21293" type="self" title="ALSA-2026:21293"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.127" release="1.el9_8" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el9_8.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">bc8783a6b011c507baf3da14de2e59eab2e1939bace955b6a8e1703a836b2483</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21296</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-29 09:40:23"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.117 and .NET Runtime 9.0.16.Security Fix(es):  

  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21296" id="RHSA-2026:21296" type="rhsa" title="RHSA-2026:21296"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-21296.html" id="ALSA-2026:21296" type="self" title="ALSA-2026:21296"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.117" release="1.el9_8" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el9_8.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">354790bd2ad65a40c54a2ad8cdac38e4032296a5854e8e1a7c5c01450d977a8c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21297</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-29 09:40:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.108 and .NET Runtime 10.0.8.Security Fix(es):  

  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21297" id="RHSA-2026:21297" type="rhsa" title="RHSA-2026:21297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-21297.html" id="ALSA-2026:21297" type="self" title="ALSA-2026:21297"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.108" release="1.el9_8" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el9_8.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.108-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">281438456c2062ccdd62aa91629c4a21fd7defa4e675340f3bc867dc4c70f152</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21556</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-28 00:00:00"/>
    <updated date="2026-06-07 22:24:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
  * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
  * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
  * kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)
  * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
  * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
  * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
  * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
  * kernel: mm/page_alloc: clear page-&gt;private in free_pages_prepare() (CVE-2026-43303)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21556" id="RHSA-2026:21556" type="rhsa" title="RHSA-2026:21556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38653" id="CVE-2025-38653" type="cve" title="CVE-2025-38653"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68183" id="CVE-2025-68183" type="cve" title="CVE-2025-68183"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68366" id="CVE-2025-68366" type="cve" title="CVE-2025-68366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68724" id="CVE-2025-68724" type="cve" title="CVE-2025-68724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71089" id="CVE-2025-71089" type="cve" title="CVE-2025-71089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23392" id="CVE-2026-23392" type="cve" title="CVE-2026-23392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23455" id="CVE-2026-23455" type="cve" title="CVE-2026-23455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31408" id="CVE-2026-31408" type="cve" title="CVE-2026-31408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31684" id="CVE-2026-31684" type="cve" title="CVE-2026-31684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31685" id="CVE-2026-31685" type="cve" title="CVE-2026-31685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31709" id="CVE-2026-31709" type="cve" title="CVE-2026-31709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43020" id="CVE-2026-43020" type="cve" title="CVE-2026-43020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43023" id="CVE-2026-43023" type="cve" title="CVE-2026-43023"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43027" id="CVE-2026-43027" type="cve" title="CVE-2026-43027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43051" id="CVE-2026-43051" type="cve" title="CVE-2026-43051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43110" id="CVE-2026-43110" type="cve" title="CVE-2026-43110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43158" id="CVE-2026-43158" type="cve" title="CVE-2026-43158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43190" id="CVE-2026-43190" type="cve" title="CVE-2026-43190"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43303" id="CVE-2026-43303" type="cve" title="CVE-2026-43303"/>
      <reference href="https://bugzilla.redhat.com/2390372" id="2390372" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422699" id="2422699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424881" id="2424881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424886" id="2424886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429104" id="2429104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451218" id="2451218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454810" id="2454810" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455334" id="2455334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461757" id="2461757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461759" id="2461759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464369" id="2464369" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464455" id="2464455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464462" id="2464462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464476" id="2464476" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464496" id="2464496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467014" id="2467014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467064" id="2467064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467210" id="2467210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468091" id="2468091" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-21556.html" id="ALSA-2026:21556" type="self" title="ALSA-2026:21556"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.12.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">0eade571d5690f3a60510aea976a94db69bbb4a905820f3e81f5a8462cc8e31f</sum>
        </package>
        <package name="libperf" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.12.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">92947b1f605e8e95c6569dced01269ec2b6ff00040394b0b4c10437bae4a2ebe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21755</id>
    <title>Important: flatpak security update</title>
    <issued date="2026-05-28 00:00:00"/>
    <updated date="2026-05-29 12:28:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flatpak security update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.  

Security Fix(es):  

  * flatpak: Flatpak: Arbitrary code execution via crafted symlinks in sandbox-expose options (CVE-2026-34078)
  * flatpak: Flatpak: Arbitrary file deletion on host via improper cache file path validation (CVE-2026-34079)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21755" id="RHSA-2026:21755" type="rhsa" title="RHSA-2026:21755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34078" id="CVE-2026-34078" type="cve" title="CVE-2026-34078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34079" id="CVE-2026-34079" type="cve" title="CVE-2026-34079"/>
      <reference href="https://bugzilla.redhat.com/2456276" id="2456276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456284" id="2456284" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-21755.html" id="ALSA-2026:21755" type="self" title="ALSA-2026:21755"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="flatpak-devel" version="1.12.9" release="4.el9_8.1" epoch="0" arch="s390x" src="flatpak-1.12.9-4.el9_8.1.src.rpm">
          <filename>flatpak-devel-1.12.9-4.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">6ff49228d0de9a7699a2a9ae25bcf4388d965789bbab852e32946bd538723369</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2212</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-12 10:34:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)
  * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819)
  * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022)
  * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024)
  * kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415)
  * kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)
  * kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459)
  * kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730)
  * kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760)
  * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)
  * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)
  * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141)
  * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)
  * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271)
  * kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269)
  * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2212" id="RHSA-2026:2212" type="rhsa" title="RHSA-2026:2212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37789" id="CVE-2025-37789" type="cve" title="CVE-2025-37789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37819" id="CVE-2025-37819" type="cve" title="CVE-2025-37819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38022" id="CVE-2025-38022" type="cve" title="CVE-2025-38022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38024" id="CVE-2025-38024" type="cve" title="CVE-2025-38024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38403" id="CVE-2025-38403" type="cve" title="CVE-2025-38403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38415" id="CVE-2025-38415" type="cve" title="CVE-2025-38415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38459" id="CVE-2025-38459" type="cve" title="CVE-2025-38459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38730" id="CVE-2025-38730" type="cve" title="CVE-2025-38730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39760" id="CVE-2025-39760" type="cve" title="CVE-2025-39760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40135" id="CVE-2025-40135" type="cve" title="CVE-2025-40135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40141" id="CVE-2025-40141" type="cve" title="CVE-2025-40141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40158" id="CVE-2025-40158" type="cve" title="CVE-2025-40158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40170" id="CVE-2025-40170" type="cve" title="CVE-2025-40170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40269" id="CVE-2025-40269" type="cve" title="CVE-2025-40269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40271" id="CVE-2025-40271" type="cve" title="CVE-2025-40271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40318" id="CVE-2025-40318" type="cve" title="CVE-2025-40318"/>
      <reference href="https://bugzilla.redhat.com/2363315" id="2363315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2365032" id="2365032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373326" id="2373326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373354" id="2373354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383404" id="2383404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383421" id="2383421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383487" id="2383487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393191" id="2393191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394601" id="2394601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414506" id="2414506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414521" id="2414521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414522" id="2414522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414523" id="2414523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419837" id="2419837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419919" id="2419919" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419920" id="2419920" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2212.html" id="ALSA-2026:2212" type="self" title="ALSA-2026:2212"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">34af5ef541f35789cf31187bf449e8bb899a923b91c3824fa4af89e2f2259c08</sum>
        </package>
        <package name="libperf" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.30.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">50c38c58c0b4e8b8dded810d83456ffee924d2745eea9243954fb0ef0f54aeb9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22553</id>
    <title>Moderate: libexif security update</title>
    <issued date="2026-06-02 00:00:00"/>
    <updated date="2026-06-03 12:42:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libexif security update</summary>
    <description>The libexif packages provide a library for extracting extra information from image files.  

Security Fix(es):  

  * libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385)
  * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22553" id="RHSA-2026:22553" type="rhsa" title="RHSA-2026:22553"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40385" id="CVE-2026-40385" type="cve" title="CVE-2026-40385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40386" id="CVE-2026-40386" type="cve" title="CVE-2026-40386"/>
      <reference href="https://bugzilla.redhat.com/2457687" id="2457687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457689" id="2457689" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-22553.html" id="ALSA-2026:22553" type="self" title="ALSA-2026:22553"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libexif-devel" version="0.6.22" release="6.el9_8.1" epoch="0" arch="s390x" src="libexif-0.6.22-6.el9_8.1.src.rpm">
          <filename>libexif-devel-0.6.22-6.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">e4b3ed8fd2d6176b3e8a05e4af43c0bbe41e74454e9df94725bbf6f348ab74e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:23332</id>
    <title>Moderate: mysql security update</title>
    <issued date="2026-06-04 00:00:00"/>
    <updated date="2026-06-05 11:43:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)
  * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)
  * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)
  * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)
  * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)
  * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)
  * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:23332" id="RHSA-2026:23332" type="rhsa" title="RHSA-2026:23332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21998" id="CVE-2026-21998" type="cve" title="CVE-2026-21998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22001" id="CVE-2026-22001" type="cve" title="CVE-2026-22001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22002" id="CVE-2026-22002" type="cve" title="CVE-2026-22002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22004" id="CVE-2026-22004" type="cve" title="CVE-2026-22004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22005" id="CVE-2026-22005" type="cve" title="CVE-2026-22005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22009" id="CVE-2026-22009" type="cve" title="CVE-2026-22009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22015" id="CVE-2026-22015" type="cve" title="CVE-2026-22015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22017" id="CVE-2026-22017" type="cve" title="CVE-2026-22017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34267" id="CVE-2026-34267" type="cve" title="CVE-2026-34267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34270" id="CVE-2026-34270" type="cve" title="CVE-2026-34270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34271" id="CVE-2026-34271" type="cve" title="CVE-2026-34271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34276" id="CVE-2026-34276" type="cve" title="CVE-2026-34276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34278" id="CVE-2026-34278" type="cve" title="CVE-2026-34278"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34293" id="CVE-2026-34293" type="cve" title="CVE-2026-34293"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34303" id="CVE-2026-34303" type="cve" title="CVE-2026-34303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34304" id="CVE-2026-34304" type="cve" title="CVE-2026-34304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34308" id="CVE-2026-34308" type="cve" title="CVE-2026-34308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35236" id="CVE-2026-35236" type="cve" title="CVE-2026-35236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35237" id="CVE-2026-35237" type="cve" title="CVE-2026-35237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35238" id="CVE-2026-35238" type="cve" title="CVE-2026-35238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35239" id="CVE-2026-35239" type="cve" title="CVE-2026-35239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35240" id="CVE-2026-35240" type="cve" title="CVE-2026-35240"/>
      <reference href="https://bugzilla.redhat.com/2460274" id="2460274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460275" id="2460275" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460276" id="2460276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460279" id="2460279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460295" id="2460295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460312" id="2460312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460315" id="2460315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460316" id="2460316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460323" id="2460323" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460324" id="2460324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460325" id="2460325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460326" id="2460326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460329" id="2460329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460331" id="2460331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460335" id="2460335" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460340" id="2460340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460342" id="2460342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460344" id="2460344" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460348" id="2460348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460356" id="2460356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460358" id="2460358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460368" id="2460368" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-23332.html" id="ALSA-2026:23332" type="self" title="ALSA-2026:23332"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="mysql-test" version="8.0.46" release="1.el9_8" epoch="0" arch="s390x" src="mysql-8.0.46-1.el9_8.src.rpm">
          <filename>mysql-test-8.0.46-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">0ad8d3cb548c1aa8ba2fdba32467d9e6a1e48774f51feae9783e62de8cfde368</sum>
        </package>
        <package name="mysql-devel" version="8.0.46" release="1.el9_8" epoch="0" arch="s390x" src="mysql-8.0.46-1.el9_8.src.rpm">
          <filename>mysql-devel-8.0.46-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">13ab5c0e8b4b4dc8b82f23ca546210c03239777c10b68cd02ab03180580dcfff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24367</id>
    <title>Important: bind security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-11 08:52:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24367" id="RHSA-2026:24367" type="rhsa" title="RHSA-2026:24367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3039" id="CVE-2026-3039" type="cve" title="CVE-2026-3039"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5946" id="CVE-2026-5946" type="cve" title="CVE-2026-5946"/>
      <reference href="https://bugzilla.redhat.com/2479767" id="2479767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479771" id="2479771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-24367.html" id="ALSA-2026:24367" type="self" title="ALSA-2026:24367"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="bind-doc" version="9.16.23" release="40.el9_8.2" epoch="32" arch="noarch" src="bind-9.16.23-40.el9_8.2.src.rpm">
          <filename>bind-doc-9.16.23-40.el9_8.2.noarch.rpm</filename>
          <sum type="sha256">61557bd6cb05170436252e5a32b80a4d838bbf099ce27f4a5fbaafc9065f9b18</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="40.el9_8.2" epoch="32" arch="s390x" src="bind-9.16.23-40.el9_8.2.src.rpm">
          <filename>bind-devel-9.16.23-40.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">b7880408eaace2b1cb56fbde44268f0c181c97ea016d630bafa4d7363c338ccb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24368</id>
    <title>Important: bind9.18 security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-07-02 10:55:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.18 security update</summary>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  

Security Fix(es):  

  * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24368" id="RHSA-2026:24368" type="rhsa" title="RHSA-2026:24368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3039" id="CVE-2026-3039" type="cve" title="CVE-2026-3039"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5946" id="CVE-2026-5946" type="cve" title="CVE-2026-5946"/>
      <reference href="https://bugzilla.redhat.com/2479767" id="2479767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479771" id="2479771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-24368.html" id="ALSA-2026:24368" type="self" title="ALSA-2026:24368"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="bind9.18-doc" version="9.18.29" release="14.el9_8.2" epoch="32" arch="noarch" src="bind9.18-9.18.29-14.el9_8.2.src.rpm">
          <filename>bind9.18-doc-9.18.29-14.el9_8.2.noarch.rpm</filename>
          <sum type="sha256">68a27d03850179ffcde06f989314cd19345ba7c77add31751ac85aa364d71405</sum>
        </package>
        <package name="bind9.18-devel" version="9.18.29" release="14.el9_8.2" epoch="32" arch="s390x" src="bind9.18-9.18.29-14.el9_8.2.src.rpm">
          <filename>bind9.18-devel-9.18.29-14.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">adc0fcc39a325a13e46ca73a0601e8d9175a8afe8dab3f6611d9b6a9118d814e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24369</id>
    <title>Important: unbound security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-11 08:53:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options (CVE-2026-42944)
  * unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages (CVE-2026-42959)
  * unbound: Unbound DNSSEC Validator Use-After-Free via Deep Copy Pointer Overwrite Leading to DoS and Possible Remote Code Execution (CVE-2026-33278)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24369" id="RHSA-2026:24369" type="rhsa" title="RHSA-2026:24369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33278" id="CVE-2026-33278" type="cve" title="CVE-2026-33278"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42944" id="CVE-2026-42944" type="cve" title="CVE-2026-42944"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42959" id="CVE-2026-42959" type="cve" title="CVE-2026-42959"/>
      <reference href="https://bugzilla.redhat.com/2479774" id="2479774" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479806" id="2479806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479808" id="2479808" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-24369.html" id="ALSA-2026:24369" type="self" title="ALSA-2026:24369"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="unbound-devel" version="1.24.2" release="3.el9_8.1" epoch="0" arch="s390x" src="unbound-1.24.2-3.el9_8.1.src.rpm">
          <filename>unbound-devel-1.24.2-3.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">1a33c0bc6421ad6f2bec6d70d8aff27c112ce9a9e4fc3d0a212bb700f0e5199a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24381</id>
    <title>Important: kernel security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-11 20:37:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)
  * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)
  * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24381" id="RHSA-2026:24381" type="rhsa" title="RHSA-2026:24381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31613" id="CVE-2026-31613" type="cve" title="CVE-2026-31613"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31786" id="CVE-2026-31786" type="cve" title="CVE-2026-31786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46243" id="CVE-2026-46243" type="cve" title="CVE-2026-46243"/>
      <reference href="https://bugzilla.redhat.com/2461480" id="2461480" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464096" id="2464096" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481486" id="2481486" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-24381.html" id="ALSA-2026:24381" type="self" title="ALSA-2026:24381"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.13.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">fa619b0d86ee8e9fbde9e659475369dfebe2677cb94ec572499e2658e4c77adf</sum>
        </package>
        <package name="libperf" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.13.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">ff82c732d618322fef96a7db152fbc74f5cfaf4fe882802c9d88a4e845c058b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25049</id>
    <title>Critical: samba security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:51:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.  

Security Fix(es):  

  * samba: Missing access check on reparse point operations (CVE-2026-1933)
  * samba: vfs_worm does not block directory modification (CVE-2026-2340)
  * samba: group policy certificate enrollment uses &lt;http://&gt; without validation (CVE-2026-3012)
  * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
  * ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)
  * samba: Remote Code Execution in SAMR (CVE-2026-4408)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25049" id="RHSA-2026:25049" type="rhsa" title="RHSA-2026:25049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1933" id="CVE-2026-1933" type="cve" title="CVE-2026-1933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2340" id="CVE-2026-2340" type="cve" title="CVE-2026-2340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3012" id="CVE-2026-3012" type="cve" title="CVE-2026-3012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40170" id="CVE-2026-40170" type="cve" title="CVE-2026-40170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4408" id="CVE-2026-4408" type="cve" title="CVE-2026-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4480" id="CVE-2026-4480" type="cve" title="CVE-2026-4480"/>
      <reference href="https://bugzilla.redhat.com/2447317" id="2447317" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447318" id="2447318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447319" id="2447319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452232" id="2452232" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2459061" id="2459061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479762" id="2479762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-25049.html" id="ALSA-2026:25049" type="self" title="ALSA-2026:25049"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libldb-devel" version="4.23.5" release="10.el9_8" epoch="0" arch="s390x" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>libldb-devel-4.23.5-10.el9_8.s390x.rpm</filename>
          <sum type="sha256">09455e9d4a9aaed2c69448902a06a8e64f8f4e171c35f9cd0649f11ed5432280</sum>
        </package>
        <package name="libnetapi-devel" version="4.23.5" release="10.el9_8" epoch="0" arch="s390x" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>libnetapi-devel-4.23.5-10.el9_8.s390x.rpm</filename>
          <sum type="sha256">3284d2f1330946968d61a2d1cdfa86852ebab0fac4febeb84dcf6be08d19b02e</sum>
        </package>
        <package name="libsmbclient-devel" version="4.23.5" release="10.el9_8" epoch="0" arch="s390x" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>libsmbclient-devel-4.23.5-10.el9_8.s390x.rpm</filename>
          <sum type="sha256">69a6f77a25155482b894250b1fada116318b6fc065a558121ec4f838a5b9dba4</sum>
        </package>
        <package name="python3-samba-test" version="4.23.5" release="10.el9_8" epoch="0" arch="s390x" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>python3-samba-test-4.23.5-10.el9_8.s390x.rpm</filename>
          <sum type="sha256">6a9b9bbdc9679388043ae87969e4b63f910a44c083417517a9bbdc574e1730b9</sum>
        </package>
        <package name="samba-test-libs" version="4.23.5" release="10.el9_8" epoch="0" arch="s390x" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>samba-test-libs-4.23.5-10.el9_8.s390x.rpm</filename>
          <sum type="sha256">7065baf95f4a60748e536fae487fc00a971225c64417c8f88c916a77c11c0c42</sum>
        </package>
        <package name="samba-pidl" version="4.23.5" release="10.el9_8" epoch="0" arch="noarch" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>samba-pidl-4.23.5-10.el9_8.noarch.rpm</filename>
          <sum type="sha256">82b6ede34ba8fb9ae0ea99f63c89050c550ba4960dcf6c895a11e28b43981c3a</sum>
        </package>
        <package name="samba-devel" version="4.23.5" release="10.el9_8" epoch="0" arch="s390x" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>samba-devel-4.23.5-10.el9_8.s390x.rpm</filename>
          <sum type="sha256">8a1be6823f8a0135031b10a02a20fd4af8a9b067f35d40881464e270aa937f61</sum>
        </package>
        <package name="samba-test" version="4.23.5" release="10.el9_8" epoch="0" arch="s390x" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>samba-test-4.23.5-10.el9_8.s390x.rpm</filename>
          <sum type="sha256">acd784a489bc9a4aaefe3b84e96cfc9fd58dde13a17dd11cb0c27452fcea629c</sum>
        </package>
        <package name="libwbclient-devel" version="4.23.5" release="10.el9_8" epoch="0" arch="s390x" src="samba-4.23.5-10.el9_8.src.rpm">
          <filename>libwbclient-devel-4.23.5-10.el9_8.s390x.rpm</filename>
          <sum type="sha256">ea57752fc2c1f537fad4a60fceb5d6c4fbaaec5398dba6b5822fffa655ffae73</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25051</id>
    <title>Important: libyang security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-08-13 08:32:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libyang security update</summary>
    <description>Libyang is YANG data modeling language parser and toolkit written (and providing API) in C.  

Security Fix(es):  

  * libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25051" id="RHSA-2026:25051" type="rhsa" title="RHSA-2026:25051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44673" id="CVE-2026-44673" type="cve" title="CVE-2026-44673"/>
      <reference href="https://bugzilla.redhat.com/2477617" id="2477617" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-25051.html" id="ALSA-2026:25051" type="self" title="ALSA-2026:25051"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libyang-devel-doc" version="2.1.148" release="1.el9_8.1" epoch="0" arch="s390x" src="libyang-2.1.148-1.el9_8.1.src.rpm">
          <filename>libyang-devel-doc-2.1.148-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">9ac01fcfe2eb6bdaa6d395d152999ae2c4e23a78acfcad95f4909922fb05f1fc</sum>
        </package>
        <package name="libyang-devel" version="2.1.148" release="1.el9_8.1" epoch="0" arch="s390x" src="libyang-2.1.148-1.el9_8.1.src.rpm">
          <filename>libyang-devel-2.1.148-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">b187b1a26377b46cd1b6f5125c9e076b4f78de435b6397774a479bbfc363d8b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25058</id>
    <title>Important: poppler security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:47:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25058" id="RHSA-2026:25058" type="rhsa" title="RHSA-2026:25058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-10118" id="CVE-2026-10118" type="cve" title="CVE-2026-10118"/>
      <reference href="https://bugzilla.redhat.com/2460428" id="2460428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-25058.html" id="ALSA-2026:25058" type="self" title="ALSA-2026:25058"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="poppler-cpp-devel" version="21.01.0" release="24.el9_8.1" epoch="0" arch="s390x" src="poppler-21.01.0-24.el9_8.1.src.rpm">
          <filename>poppler-cpp-devel-21.01.0-24.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">0d83597c100406bb21856cc909f368ead169b46213bfbfd49187c0f047f555b7</sum>
        </package>
        <package name="poppler-devel" version="21.01.0" release="24.el9_8.1" epoch="0" arch="s390x" src="poppler-21.01.0-24.el9_8.1.src.rpm">
          <filename>poppler-devel-21.01.0-24.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">0f485d656f7e3d3aa098a6069bffcdafe737247d05e0f712c4f532804513a802</sum>
        </package>
        <package name="poppler-glib-doc" version="21.01.0" release="24.el9_8.1" epoch="0" arch="noarch" src="poppler-21.01.0-24.el9_8.1.src.rpm">
          <filename>poppler-glib-doc-21.01.0-24.el9_8.1.noarch.rpm</filename>
          <sum type="sha256">5d072daa7f6d715a1e707ca4de274071d907d17358f4152524745c4d42ea6ba2</sum>
        </package>
        <package name="poppler-qt5-devel" version="21.01.0" release="24.el9_8.1" epoch="0" arch="s390x" src="poppler-21.01.0-24.el9_8.1.src.rpm">
          <filename>poppler-qt5-devel-21.01.0-24.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">99fb028272fb263ca0814d5c1e409301df989bb19f5531a0f2a23df84f9dde7f</sum>
        </package>
        <package name="poppler-glib-devel" version="21.01.0" release="24.el9_8.1" epoch="0" arch="s390x" src="poppler-21.01.0-24.el9_8.1.src.rpm">
          <filename>poppler-glib-devel-21.01.0-24.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">9ce3e8087edbc11daf757e7f9bb36b67e46c5ffcf3f0c0321551c5e0f7bd67b2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25217</id>
    <title>Important: kernel security update</title>
    <issued date="2026-06-11 00:00:00"/>
    <updated date="2026-06-11 18:23:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216)
  * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
  * kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508)
  * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)
  * kernel: ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (CVE-2026-43037)
  * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056)
  * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
  * kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)
  * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)
  * kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)
  * kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25217" id="RHSA-2026:25217" type="rhsa" title="RHSA-2026:25217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23216" id="CVE-2026-23216" type="cve" title="CVE-2026-23216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31419" id="CVE-2026-31419" type="cve" title="CVE-2026-31419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31508" id="CVE-2026-31508" type="cve" title="CVE-2026-31508"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31581" id="CVE-2026-31581" type="cve" title="CVE-2026-31581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43037" id="CVE-2026-43037" type="cve" title="CVE-2026-43037"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43056" id="CVE-2026-43056" type="cve" title="CVE-2026-43056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43116" id="CVE-2026-43116" type="cve" title="CVE-2026-43116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43125" id="CVE-2026-43125" type="cve" title="CVE-2026-43125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43501" id="CVE-2026-43501" type="cve" title="CVE-2026-43501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45852" id="CVE-2026-45852" type="cve" title="CVE-2026-45852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46181" id="CVE-2026-46181" type="cve" title="CVE-2026-46181"/>
      <reference href="https://bugzilla.redhat.com/2440630" id="2440630" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457829" id="2457829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460641" id="2460641" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461471" id="2461471" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464351" id="2464351" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464449" id="2464449" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467005" id="2467005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467234" id="2467234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480457" id="2480457" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482166" id="2482166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482532" id="2482532" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-25217.html" id="ALSA-2026:25217" type="self" title="ALSA-2026:25217"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.15.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">44e3aac53640288a5e476959c1af898f24cfbd25f12bd7f9d664f96f68943b4f</sum>
        </package>
        <package name="libperf" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.15.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">4b12fd27887f1f02abbc2b887155d6ddb8063dc3b66e92c3aa236b8bf2e5084d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25220</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-06-11 00:00:00"/>
    <updated date="2026-06-12 09:45:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25220" id="RHSA-2026:25220" type="rhsa" title="RHSA-2026:25220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-25220.html" id="ALSA-2026:25220" type="self" title="ALSA-2026:25220"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.128" release="1.el9_8" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el9_8.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">ec89d95257e76ae80a0aaa014c463a6a3cd96629d3d74045367b0fe1a368658f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25221</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-06-11 00:00:00"/>
    <updated date="2026-06-12 11:39:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25221" id="RHSA-2026:25221" type="rhsa" title="RHSA-2026:25221"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-25221.html" id="ALSA-2026:25221" type="self" title="ALSA-2026:25221"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.118" release="1.el9_8" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el9_8.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">ddb51d2391e4cc832671464bb8cb571cad6e746c3ca4b8ecafa50578d1f9dae3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25222</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-06-11 00:00:00"/>
    <updated date="2026-06-12 09:45:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25222" id="RHSA-2026:25222" type="rhsa" title="RHSA-2026:25222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-25222.html" id="ALSA-2026:25222" type="self" title="ALSA-2026:25222"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.109" release="1.el9_8" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el9_8.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">a74393b8e1ae8a29a8941a153c3ba3f9a807d996b6fe3d681cc7238839ef98ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26455</id>
    <title>Important: 389-ds-base security, bug fix, and enhancement update</title>
    <issued date="2026-06-17 00:00:00"/>
    <updated date="2026-07-02 09:31:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>389-ds-base security, bug fix, and enhancement update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.  

Security Fix(es):  

  * 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) (CVE-2026-9064)


Bug Fix(es) and Enhancement(s):  

  * Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [almalinux-9.8.z] (JIRA:AlmaLinux-152356)
  * Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [almalinux-9.8.z] (JIRA:AlmaLinux-168967)
  * DS 12 does not handle escape char in bind user [almalinux-9.8.z] (JIRA:AlmaLinux-170269)
  * [RFE] Add OS-level thread names to all server threads [almalinux-9.8.z] (JIRA:AlmaLinux-174524)
  * Online export is failing when using the option "-s" [almalinux-9.8.z] (JIRA:AlmaLinux-180716)
  * Server shutdown during online reindex may lead to data loss [almalinux-9.8.z] (JIRA:AlmaLinux-183895)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26455" id="RHSA-2026:26455" type="rhsa" title="RHSA-2026:26455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9064" id="CVE-2026-9064" type="cve" title="CVE-2026-9064"/>
      <reference href="https://bugzilla.redhat.com/2480093" id="2480093" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-26455.html" id="ALSA-2026:26455" type="self" title="ALSA-2026:26455"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="389-ds-base-devel" version="2.8.0" release="7.el9_8" epoch="0" arch="s390x" src="389-ds-base-2.8.0-7.el9_8.src.rpm">
          <filename>389-ds-base-devel-2.8.0-7.el9_8.s390x.rpm</filename>
          <sum type="sha256">4bb7a929716f23c6a1b3748efb1edf582201a1ddc7ec1a33affb1f378f12f14c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26590</id>
    <title>Important: xorg-x11-server-Xwayland security, bug fix, and enhancement update</title>
    <issued date="2026-06-17 00:00:00"/>
    <updated date="2026-07-02 09:28:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server-Xwayland security, bug fix, and enhancement update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)


Bug Fix(es) and Enhancement(s):  

  * [xwayland] Backport other security fixes without a CVE assigned [almalinux-9.8.z] (JIRA:AlmaLinux-184292)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26590" id="RHSA-2026:26590" type="rhsa" title="RHSA-2026:26590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50256" id="CVE-2026-50256" type="cve" title="CVE-2026-50256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50257" id="CVE-2026-50257" type="cve" title="CVE-2026-50257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50258" id="CVE-2026-50258" type="cve" title="CVE-2026-50258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50259" id="CVE-2026-50259" type="cve" title="CVE-2026-50259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50260" id="CVE-2026-50260" type="cve" title="CVE-2026-50260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50261" id="CVE-2026-50261" type="cve" title="CVE-2026-50261"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50262" id="CVE-2026-50262" type="cve" title="CVE-2026-50262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50263" id="CVE-2026-50263" type="cve" title="CVE-2026-50263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50264" id="CVE-2026-50264" type="cve" title="CVE-2026-50264"/>
      <reference href="https://bugzilla.redhat.com/2485380" id="2485380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485382" id="2485382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485383" id="2485383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485384" id="2485384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485385" id="2485385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485386" id="2485386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485387" id="2485387" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485388" id="2485388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485389" id="2485389" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-26590.html" id="ALSA-2026:26590" type="self" title="ALSA-2026:26590"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="xorg-x11-server-Xwayland-devel" version="24.1.9" release="4.el9_8.2" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-24.1.9-4.el9_8.2.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-24.1.9-4.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">de9911def1fb22db2b04cd5068444aa7f38fd10a769c82c2d6df7e68e338113d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26610</id>
    <title>Important: xorg-x11-server security, bug fix, and enhancement update</title>
    <issued date="2026-06-17 00:00:00"/>
    <updated date="2026-07-02 09:29:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server security, bug fix, and enhancement update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)
  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)


Bug Fix(es) and Enhancement(s):  

  * [xserver] Backport other security fixes without a CVE assigned [almalinux-9.8.z] (JIRA:AlmaLinux-184288)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26610" id="RHSA-2026:26610" type="rhsa" title="RHSA-2026:26610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50256" id="CVE-2026-50256" type="cve" title="CVE-2026-50256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50257" id="CVE-2026-50257" type="cve" title="CVE-2026-50257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50258" id="CVE-2026-50258" type="cve" title="CVE-2026-50258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50259" id="CVE-2026-50259" type="cve" title="CVE-2026-50259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50260" id="CVE-2026-50260" type="cve" title="CVE-2026-50260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50261" id="CVE-2026-50261" type="cve" title="CVE-2026-50261"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50262" id="CVE-2026-50262" type="cve" title="CVE-2026-50262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50263" id="CVE-2026-50263" type="cve" title="CVE-2026-50263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50264" id="CVE-2026-50264" type="cve" title="CVE-2026-50264"/>
      <reference href="https://bugzilla.redhat.com/2485380" id="2485380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485382" id="2485382" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485383" id="2485383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485384" id="2485384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485385" id="2485385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485386" id="2485386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485387" id="2485387" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485388" id="2485388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485389" id="2485389" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-26610.html" id="ALSA-2026:26610" type="self" title="ALSA-2026:26610"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="34.el9_8.2" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-34.el9_8.2.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-34.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">c1f4f3f401c0b6e12693a10a06805a45afff7051c56630da9e1ccac3d9469761</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="34.el9_8.2" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-34.el9_8.2.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-34.el9_8.2.noarch.rpm</filename>
          <sum type="sha256">fe8d7b998faa3cd785e1f21616963da47934a541405c9daba0277692995ea4cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2722</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-16 00:00:00"/>
    <updated date="2026-02-23 13:18:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)
  * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
  * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304)
  * kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322)
  * kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349)
  * kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811)
  * kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2722" id="RHSA-2026:2722" type="rhsa" title="RHSA-2026:2722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53034" id="CVE-2023-53034" type="cve" title="CVE-2023-53034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40064" id="CVE-2025-40064" type="cve" title="CVE-2025-40064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40304" id="CVE-2025-40304" type="cve" title="CVE-2025-40304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40322" id="CVE-2025-40322" type="cve" title="CVE-2025-40322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68349" id="CVE-2025-68349" type="cve" title="CVE-2025-68349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68811" id="CVE-2025-68811" type="cve" title="CVE-2025-68811"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22998" id="CVE-2026-22998" type="cve" title="CVE-2026-22998"/>
      <reference href="https://bugzilla.redhat.com/2360239" id="2360239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406747" id="2406747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419870" id="2419870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419902" id="2419902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424880" id="2424880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429116" id="2429116" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432671" id="2432671" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2722.html" id="ALSA-2026:2722" type="self" title="ALSA-2026:2722"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">dd842918ab9e5e3d8d785eb8413cdef1b675a7441e4faee5e6f9f381d204eff0</sum>
        </package>
        <package name="libperf" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.34.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">f90d79371215def4c11f0aa53a345ebc4db53b4041071bcc75bdbff12efe5562</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:27741</id>
    <title>Important: postgresql security update</title>
    <issued date="2026-06-22 00:00:00"/>
    <updated date="2026-06-23 10:16:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475)
  * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)
  * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
  * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:27741" id="RHSA-2026:27741" type="rhsa" title="RHSA-2026:27741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6473" id="CVE-2026-6473" type="cve" title="CVE-2026-6473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6475" id="CVE-2026-6475" type="cve" title="CVE-2026-6475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6477" id="CVE-2026-6477" type="cve" title="CVE-2026-6477"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6478" id="CVE-2026-6478" type="cve" title="CVE-2026-6478"/>
      <reference href="https://bugzilla.redhat.com/2477439" id="2477439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477442" id="2477442" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477447" id="2477447" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477448" id="2477448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-27741.html" id="ALSA-2026:27741" type="self" title="ALSA-2026:27741"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="postgresql-docs" version="13.23" release="3.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-3.el9_8.src.rpm">
          <filename>postgresql-docs-13.23-3.el9_8.s390x.rpm</filename>
          <sum type="sha256">0d792829e22db403d7be92eebbf11aadf9dccc9db240f2338e056cee3ab9ebba</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.23" release="3.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-3.el9_8.src.rpm">
          <filename>postgresql-upgrade-devel-13.23-3.el9_8.s390x.rpm</filename>
          <sum type="sha256">117bed0f332054bc41f18cfdc4387f2b5a1ee1c968d6a28954f6b37a8832294f</sum>
        </package>
        <package name="postgresql-static" version="13.23" release="3.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-3.el9_8.src.rpm">
          <filename>postgresql-static-13.23-3.el9_8.s390x.rpm</filename>
          <sum type="sha256">1ee3f0f1dd2cf41391de3dfd128f2006fe36e2e1c498ce81929597897c46d703</sum>
        </package>
        <package name="postgresql-server-devel" version="13.23" release="3.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-3.el9_8.src.rpm">
          <filename>postgresql-server-devel-13.23-3.el9_8.s390x.rpm</filename>
          <sum type="sha256">318e322fc4564c096e560957de128c299e4c39c4da433e6c94eaf4a18e815255</sum>
        </package>
        <package name="postgresql-test" version="13.23" release="3.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-3.el9_8.src.rpm">
          <filename>postgresql-test-13.23-3.el9_8.s390x.rpm</filename>
          <sum type="sha256">bba99519b56a7f496adbe179e40f8f3eb7fabbb54413ee4b011ca3709248239e</sum>
        </package>
        <package name="postgresql-private-devel" version="13.23" release="3.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-3.el9_8.src.rpm">
          <filename>postgresql-private-devel-13.23-3.el9_8.s390x.rpm</filename>
          <sum type="sha256">bf70c4551eb311ea58b595ce1c1d9db6016a0f991a3b29fa773b7dd366733313</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.23" release="3.el9_8" epoch="0" arch="noarch" src="postgresql-13.23-3.el9_8.src.rpm">
          <filename>postgresql-test-rpm-macros-13.23-3.el9_8.noarch.rpm</filename>
          <sum type="sha256">f6060fb4be90b694977de0b268823c300ea7bb804cc5da4363f78ccda9909d03</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2776</id>
    <title>Moderate: edk2 security update</title>
    <issued date="2026-02-17 00:00:00"/>
    <updated date="2026-02-18 13:48:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>edk2 security update</summary>
    <description>EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.   

Security Fix(es):  

  * openssl: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap (CVE-2025-9230)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2776" id="RHSA-2026:2776" type="rhsa" title="RHSA-2026:2776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9230" id="CVE-2025-9230" type="cve" title="CVE-2025-9230"/>
      <reference href="https://bugzilla.redhat.com/2396054" id="2396054" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2776.html" id="ALSA-2026:2776" type="self" title="ALSA-2026:2776"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="edk2-tools-doc" version="20241117" release="4.el9_7.3" epoch="0" arch="noarch" src="edk2-20241117-4.el9_7.3.src.rpm">
          <filename>edk2-tools-doc-20241117-4.el9_7.3.noarch.rpm</filename>
          <sum type="sha256">4b87347bffd1678e7310392c107ce78ebc719dac11d389efe0562315bfe5e98b</sum>
        </package>
        <package name="edk2-ovmf" version="20241117" release="4.el9_7.3" epoch="0" arch="noarch" src="edk2-20241117-4.el9_7.3.src.rpm">
          <filename>edk2-ovmf-20241117-4.el9_7.3.noarch.rpm</filename>
          <sum type="sha256">b5e7af0c61e51f6617ef9d9b9ae4fc554d01d0de332dade45c8bb7304457a20d</sum>
        </package>
        <package name="edk2-aarch64" version="20241117" release="4.el9_7.3" epoch="0" arch="noarch" src="edk2-20241117-4.el9_7.3.src.rpm">
          <filename>edk2-aarch64-20241117-4.el9_7.3.noarch.rpm</filename>
          <sum type="sha256">c529f43a57b1378db756550bd605d19c555f6d0c4d1b8d34861e2a5c1bfb655e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:27789</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-06-22 00:00:00"/>
    <updated date="2026-06-23 10:13:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)
  * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)
  * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)
  * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)
  * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)
  * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)
  * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414)
  * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)
  * kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)
  * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)
  * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)
  * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117)
  * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145)
  * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)
  * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)
  * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)
  * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)


Bug Fix(es) and Enhancement(s):  

  * AlmaLinux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-9.8.z] (JIRA:AlmaLinux-166048)
  * [AlmaLinux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [almalinux-9.8.z] (JIRA:AlmaLinux-175699)
  * DPLL: Add support for pin operational state [almalinux-9.8.z] (JIRA:AlmaLinux-175820)
  * DPLL: Add support for fractional frequency offset between pin and device [almalinux-9.8.z] (JIRA:AlmaLinux-175823)
  * ibmveth Adapter Freeze with Small MSS [almalinux-9.8.z] (JIRA:AlmaLinux-178308)
  * AlmaLinux9.4 - s390/mm: Add missing secure storage access fixups [almalinux-9.8.z] (JIRA:AlmaLinux-183317)
  * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-9.8.z] (JIRA:AlmaLinux-183130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:27789" id="RHSA-2026:27789" type="rhsa" title="RHSA-2026:27789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31474" id="CVE-2026-31474" type="cve" title="CVE-2026-31474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31669" id="CVE-2026-31669" type="cve" title="CVE-2026-31669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31772" id="CVE-2026-31772" type="cve" title="CVE-2026-31772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31787" id="CVE-2026-31787" type="cve" title="CVE-2026-31787"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43260" id="CVE-2026-43260" type="cve" title="CVE-2026-43260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43279" id="CVE-2026-43279" type="cve" title="CVE-2026-43279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43414" id="CVE-2026-43414" type="cve" title="CVE-2026-43414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45984" id="CVE-2026-45984" type="cve" title="CVE-2026-45984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46056" id="CVE-2026-46056" type="cve" title="CVE-2026-46056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46117" id="CVE-2026-46117" type="cve" title="CVE-2026-46117"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46125" id="CVE-2026-46125" type="cve" title="CVE-2026-46125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46135" id="CVE-2026-46135" type="cve" title="CVE-2026-46135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46145" id="CVE-2026-46145" type="cve" title="CVE-2026-46145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46152" id="CVE-2026-46152" type="cve" title="CVE-2026-46152"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46166" id="CVE-2026-46166" type="cve" title="CVE-2026-46166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46173" id="CVE-2026-46173" type="cve" title="CVE-2026-46173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46331" id="CVE-2026-46331" type="cve" title="CVE-2026-46331"/>
      <reference href="https://bugzilla.redhat.com/2460646" id="2460646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461503" id="2461503" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464092" id="2464092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464502" id="2464502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467083" id="2467083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467215" id="2467215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468155" id="2468155" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479492" id="2479492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481922" id="2481922" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482181" id="2482181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482563" id="2482563" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482576" id="2482576" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482581" id="2482581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482608" id="2482608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482634" id="2482634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482645" id="2482645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482654" id="2482654" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-27789.html" id="ALSA-2026:27789" type="self" title="ALSA-2026:27789"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.17.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">054eee51bbc1e4fe6bf5becfa4786b316b74fefb7517a110b7f54aa6d9a42937</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.17.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">3d1027e5e2a3f321bfdb1daf227b586f372623da707da1a7e6655c65b197e9a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2786</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-02-17 00:00:00"/>
    <updated date="2026-02-18 13:43:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Integer overflow in memalign leads to heap corruption (CVE-2026-0861)
  * glibc: glibc: Information disclosure via zero-valued network query (CVE-2026-0915)
  * glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory (CVE-2025-15281)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2786" id="RHSA-2026:2786" type="rhsa" title="RHSA-2026:2786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15281" id="CVE-2025-15281" type="cve" title="CVE-2025-15281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0861" id="CVE-2026-0861" type="cve" title="CVE-2026-0861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0915" id="CVE-2026-0915" type="cve" title="CVE-2026-0915"/>
      <reference href="https://bugzilla.redhat.com/2429771" id="2429771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430201" id="2430201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431196" id="2431196" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2786.html" id="ALSA-2026:2786" type="self" title="ALSA-2026:2786"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="glibc-benchtests" version="2.34" release="231.el9_7.10" epoch="0" arch="s390x" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>glibc-benchtests-2.34-231.el9_7.10.s390x.rpm</filename>
          <sum type="sha256">078971c58da9cb5087e375991384f879a28e4df9f579f291373b4cf1e0053b7a</sum>
        </package>
        <package name="glibc-nss-devel" version="2.34" release="231.el9_7.10" epoch="0" arch="s390x" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>glibc-nss-devel-2.34-231.el9_7.10.s390x.rpm</filename>
          <sum type="sha256">1aaf33ea9ce8a34d16b8e739573f9c07c9fb2be6fd2a01eef52b14b3617c5aaa</sum>
        </package>
        <package name="nss_db" version="2.34" release="231.el9_7.10" epoch="0" arch="s390x" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>nss_db-2.34-231.el9_7.10.s390x.rpm</filename>
          <sum type="sha256">2417bf392a7b6301dcbcea91fa6f09b5854833db45808129480b52e6ac5a4301</sum>
        </package>
        <package name="nss_hesiod" version="2.34" release="231.el9_7.10" epoch="0" arch="s390x" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>nss_hesiod-2.34-231.el9_7.10.s390x.rpm</filename>
          <sum type="sha256">300026a31632a2b71ce827f52760176d66318ea409ced05572a60d40ddcf160e</sum>
        </package>
        <package name="glibc-static" version="2.34" release="231.el9_7.10" epoch="0" arch="s390x" src="glibc-2.34-231.el9_7.10.src.rpm">
          <filename>glibc-static-2.34-231.el9_7.10.s390x.rpm</filename>
          <sum type="sha256">92514c31f73c1a472ec6b5e67fb6d23816447b6b36ed2ceeccc5b23605fcabf6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28247</id>
    <title>Important: python3.14 security, bug fix, and enhancement update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-06-25 10:16:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.14 security, bug fix, and enhancement update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)
  * python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module (CVE-2026-6019)


Bug Fix(es) and Enhancement(s):  

  * [9.8.z]Update python3.14 to 3.14.5 for the incremental GC changes (JIRA:AlmaLinux-180642)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28247" id="RHSA-2026:28247" type="rhsa" title="RHSA-2026:28247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6019" id="CVE-2026-6019" type="cve" title="CVE-2026-6019"/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460869" id="2460869" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-28247.html" id="ALSA-2026:28247" type="self" title="ALSA-2026:28247"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="python3.14-freethreading-idle" version="3.14.5" release="1.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.src.rpm">
          <filename>python3.14-freethreading-idle-3.14.5-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">04a694a49105971335df5431d6fcae5df69183b8b0986537d6af4b228070246a</sum>
        </package>
        <package name="python3.14-idle" version="3.14.5" release="1.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.src.rpm">
          <filename>python3.14-idle-3.14.5-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">30ebd0bd86ddd207cf11c531ecc773adb12b5c7df57408deb4c00679c9789956</sum>
        </package>
        <package name="python3.14-test" version="3.14.5" release="1.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.src.rpm">
          <filename>python3.14-test-3.14.5-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">3222607449d0d6abc3c9866b4afb43f4125e1632991f0dc75befc348b91b9131</sum>
        </package>
        <package name="python3.14-freethreading-tkinter" version="3.14.5" release="1.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.src.rpm">
          <filename>python3.14-freethreading-tkinter-3.14.5-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">4c782f6d3ae4ba9dba7357a3897b264d24577edcc95892100efa7ee53a3be423</sum>
        </package>
        <package name="python3.14-freethreading-test" version="3.14.5" release="1.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.src.rpm">
          <filename>python3.14-freethreading-test-3.14.5-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">655c77eecae5577045c210ead563de92bee964399cebfdcba3d84aaa22c769e2</sum>
        </package>
        <package name="python3.14-freethreading" version="3.14.5" release="1.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.src.rpm">
          <filename>python3.14-freethreading-3.14.5-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">7527350ef6e1512842f386c0196296a52bd5aba8306db3a37e59421fc9c3949c</sum>
        </package>
        <package name="python3.14-freethreading-debug" version="3.14.5" release="1.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.src.rpm">
          <filename>python3.14-freethreading-debug-3.14.5-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">75ae99ec597a8f874372427e28c02b0be7a3bc7d01936319cec091fae2946090</sum>
        </package>
        <package name="python3.14-freethreading-libs" version="3.14.5" release="1.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.src.rpm">
          <filename>python3.14-freethreading-libs-3.14.5-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">9d15bfaff0e921d2dd764a0e15e54cf686a0ad9b404b91ab2e387c8382b3f1ba</sum>
        </package>
        <package name="python3.14-freethreading-devel" version="3.14.5" release="1.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.src.rpm">
          <filename>python3.14-freethreading-devel-3.14.5-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">d47d4dc06c89e0d797443a84c6235140ab8a19f4900ff92cf9a214ceff07fec8</sum>
        </package>
        <package name="python3.14-debug" version="3.14.5" release="1.el9_8" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.src.rpm">
          <filename>python3.14-debug-3.14.5-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">f12ff9b087a6e070d0e77267b26dcb395e9810f5a9c06e1babff9657396870f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28256</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2026-06-23 00:00:00"/>
    <updated date="2026-06-26 12:55:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.  

Security Fix(es):  

  * openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28256" id="RHSA-2026:28256" type="rhsa" title="RHSA-2026:28256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40253" id="CVE-2026-40253" type="cve" title="CVE-2026-40253"/>
      <reference href="https://bugzilla.redhat.com/2459076" id="2459076" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-28256.html" id="ALSA-2026:28256" type="self" title="ALSA-2026:28256"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="opencryptoki-devel" version="3.26.0" release="2.el9_8.2" epoch="0" arch="s390x" src="opencryptoki-3.26.0-2.el9_8.2.src.rpm">
          <filename>opencryptoki-devel-3.26.0-2.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">628fb8592155a043eae76f553af81a52f9265d861416ff9e40c732d6af4eea7a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:28973</id>
    <title>Important: nginx security update</title>
    <issued date="2026-06-24 00:00:00"/>
    <updated date="2026-06-25 10:10:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:28973" id="RHSA-2026:28973" type="rhsa" title="RHSA-2026:28973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-9256" id="CVE-2026-9256" type="cve" title="CVE-2026-9256"/>
      <reference href="https://bugzilla.redhat.com/2480746" id="2480746" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-28973.html" id="ALSA-2026:28973" type="self" title="ALSA-2026:28973"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="nginx-mod-devel" version="1.20.1" release="28.el9_8.3.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-28.el9_8.3.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.20.1-28.el9_8.3.alma.1.s390x.rpm</filename>
          <sum type="sha256">3dab7011dff0db91ca7af89d2fdf47409ab82b6e11177460fe265603e7e34d8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3034</id>
    <title>Important: munge security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-26 10:49:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>munge security update</summary>
    <description>MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.  

Security Fix(es):  

  * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery (CVE-2026-25506)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3034" id="RHSA-2026:3034" type="rhsa" title="RHSA-2026:3034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25506" id="CVE-2026-25506" type="cve" title="CVE-2026-25506"/>
      <reference href="https://bugzilla.redhat.com/2438715" id="2438715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3034.html" id="ALSA-2026:3034" type="self" title="ALSA-2026:3034"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="munge-devel" version="0.5.13" release="14.el9_7" epoch="0" arch="s390x" src="munge-0.5.13-14.el9_7.src.rpm">
          <filename>munge-devel-0.5.13-14.el9_7.s390x.rpm</filename>
          <sum type="sha256">8b0d7a6446fef065c2bfeb38e6c252054ec66f130173fbeae2d7c3d11e55677b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3066</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-26 10:42:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129)
  * kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service (CVE-2025-38206)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3066" id="RHSA-2026:3066" type="rhsa" title="RHSA-2026:3066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38129" id="CVE-2025-38129" type="cve" title="CVE-2025-38129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38206" id="CVE-2025-38206" type="cve" title="CVE-2025-38206"/>
      <reference href="https://bugzilla.redhat.com/2376034" id="2376034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376377" id="2376377" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3066.html" id="ALSA-2026:3066" type="self" title="ALSA-2026:3066"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">86fa7494b7e314567d2a71953ae925da3df37f77eeacbfa3fa232752331ca3d0</sum>
        </package>
        <package name="libperf" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.35.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e6fdccadf42fbb3dba19d65a50988881ccb45700b576f28aa320fffc266ed891</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3067</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-26 10:36:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
  * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3067" id="RHSA-2026:3067" type="rhsa" title="RHSA-2026:3067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22855" id="CVE-2026-22855" type="cve" title="CVE-2026-22855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22858" id="CVE-2026-22858" type="cve" title="CVE-2026-22858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22859" id="CVE-2026-22859" type="cve" title="CVE-2026-22859"/>
      <reference href="https://bugzilla.redhat.com/2429645" id="2429645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429649" id="2429649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429653" id="2429653" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3067.html" id="ALSA-2026:3067" type="self" title="ALSA-2026:3067"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="freerdp-devel" version="2.11.7" release="1.el9_7.2" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.2.src.rpm">
          <filename>freerdp-devel-2.11.7-1.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">191c77d4f70197e67a5a0a008762a2406047798b85713f0d777b7eef630e74cc</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="1.el9_7.2" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.2.src.rpm">
          <filename>libwinpr-devel-2.11.7-1.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">3347bef309454e13124a1355e3354cba1e863d55c71039b5b9c475ed65289b36</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:30848</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-06-30 09:39:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488)
  * kernel: ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)
  * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)
  * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)
  * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)
  * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898)
  * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)
  * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176)
  * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux-9.8.z]: Update the mlx5 drivers to v6.19 (JIRA:AlmaLinux-169057)
  * iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops subsequent packets [almalinux-9.8.z] (JIRA:AlmaLinux-172993)
  * nf_conntrack_sctp: vtag corruption with late INIT in ESTABLISHED state across conntrack zones [almalinux-9.8.z] (JIRA:AlmaLinux-178273)
  * sched/fair: Skip sched_balance_running cmpxchg when balance is not due [almalinux-9.8.z] (JIRA:AlmaLinux-182776)
  * [REGRESSION] ISST-Spyre: Jenkins workload causes soft lock warning to appear on screen. Workload hangs. [almalinux-9.8.z] (JIRA:AlmaLinux-183183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:30848" id="RHSA-2026:30848" type="rhsa" title="RHSA-2026:30848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31488" id="CVE-2026-31488" type="cve" title="CVE-2026-31488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43038" id="CVE-2026-43038" type="cve" title="CVE-2026-43038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43329" id="CVE-2026-43329" type="cve" title="CVE-2026-43329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45898" id="CVE-2026-45898" type="cve" title="CVE-2026-45898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46054" id="CVE-2026-46054" type="cve" title="CVE-2026-46054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46090" id="CVE-2026-46090" type="cve" title="CVE-2026-46090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46176" id="CVE-2026-46176" type="cve" title="CVE-2026-46176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46189" id="CVE-2026-46189" type="cve" title="CVE-2026-46189"/>
      <reference href="https://bugzilla.redhat.com/2460619" id="2460619" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464397" id="2464397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468124" id="2468124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481980" id="2481980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482025" id="2482025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482031" id="2482031" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482588" id="2482588" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482594" id="2482594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-30848.html" id="ALSA-2026:30848" type="self" title="ALSA-2026:30848"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.19.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">0c07588da2a15ff2e8f454daa11c29ef71ccfa95dd86b066d9d7619a29b24f58</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.19.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">6a611fdfde973f1413ef58698c3a96364bba3bedfab7d525d14b3f67346e865c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3095</id>
    <title>Important: protobuf security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-24 00:13:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>protobuf security update</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.  

Security Fix(es):  

  * python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3095" id="RHSA-2026:3095" type="rhsa" title="RHSA-2026:3095"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0994" id="CVE-2026-0994" type="cve" title="CVE-2026-0994"/>
      <reference href="https://bugzilla.redhat.com/2432398" id="2432398" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3095.html" id="ALSA-2026:3095" type="self" title="ALSA-2026:3095"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="protobuf-compiler" version="3.14.0" release="17.el9_7" epoch="0" arch="s390x" src="protobuf-3.14.0-17.el9_7.src.rpm">
          <filename>protobuf-compiler-3.14.0-17.el9_7.s390x.rpm</filename>
          <sum type="sha256">62e40c78e4ada992377e4885fea3e9ffb6d5705c021388b0749498d123c61f51</sum>
        </package>
        <package name="protobuf-lite-devel" version="3.14.0" release="17.el9_7" epoch="0" arch="s390x" src="protobuf-3.14.0-17.el9_7.src.rpm">
          <filename>protobuf-lite-devel-3.14.0-17.el9_7.s390x.rpm</filename>
          <sum type="sha256">a57f00630bec15232628a0cc78888cfea46b0f3a01acf868e9bc15ea1c80daff</sum>
        </package>
        <package name="protobuf-devel" version="3.14.0" release="17.el9_7" epoch="0" arch="s390x" src="protobuf-3.14.0-17.el9_7.src.rpm">
          <filename>protobuf-devel-3.14.0-17.el9_7.s390x.rpm</filename>
          <sum type="sha256">bb774d46d16d95eecd66498cddd35ce041e21255c96f5d60ecb781b8512ed6f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3189</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2026-02-24 00:00:00"/>
    <updated date="2026-02-26 10:31:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.  

Security Fix(es):  

  * 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow (CVE-2025-14905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3189" id="RHSA-2026:3189" type="rhsa" title="RHSA-2026:3189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14905" id="CVE-2025-14905" type="cve" title="CVE-2025-14905"/>
      <reference href="https://bugzilla.redhat.com/2423624" id="2423624" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3189.html" id="ALSA-2026:3189" type="self" title="ALSA-2026:3189"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="389-ds-base-devel" version="2.7.0" release="10.el9_7" epoch="0" arch="s390x" src="389-ds-base-2.7.0-10.el9_7.src.rpm">
          <filename>389-ds-base-devel-2.7.0-10.el9_7.s390x.rpm</filename>
          <sum type="sha256">39470f5c383873804d7c606bd0577236b0a2280620b9ce721c1f57d701eea70d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33226</id>
    <title>Moderate: glibc security, bug fix, and enhancement update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-06-30 13:40:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security, bug fix, and enhancement update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450)


Bug Fix(es) and Enhancement(s):  

  * glibc: counter overflow in __wcsmbs_clone_conv if setlocale is called (JIRA:AlmaLinux-145156)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33226" id="RHSA-2026:33226" type="rhsa" title="RHSA-2026:33226"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5450" id="CVE-2026-5450" type="cve" title="CVE-2026-5450"/>
      <reference href="https://bugzilla.redhat.com/2459853" id="2459853" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-33226.html" id="ALSA-2026:33226" type="self" title="ALSA-2026:33226"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="nss_db" version="2.34" release="272.el9_8" epoch="0" arch="s390x" src="glibc-2.34-272.el9_8.src.rpm">
          <filename>nss_db-2.34-272.el9_8.s390x.rpm</filename>
          <sum type="sha256">096030d50da52bec1a76c55f6f3696df3b1d8fa37363b1e1627a5b99f84353ca</sum>
        </package>
        <package name="glibc-static" version="2.34" release="272.el9_8" epoch="0" arch="s390x" src="glibc-2.34-272.el9_8.src.rpm">
          <filename>glibc-static-2.34-272.el9_8.s390x.rpm</filename>
          <sum type="sha256">66f722390c40e42015ed34197f14a878131491e2fcd0bae470ea9bccf3a32b3a</sum>
        </package>
        <package name="glibc-benchtests" version="2.34" release="272.el9_8" epoch="0" arch="s390x" src="glibc-2.34-272.el9_8.src.rpm">
          <filename>glibc-benchtests-2.34-272.el9_8.s390x.rpm</filename>
          <sum type="sha256">c84cf8b80ae051fc7b3d25463e8ad531d8add7e6726c1bdefb41b791871e228a</sum>
        </package>
        <package name="nss_hesiod" version="2.34" release="272.el9_8" epoch="0" arch="s390x" src="glibc-2.34-272.el9_8.src.rpm">
          <filename>nss_hesiod-2.34-272.el9_8.s390x.rpm</filename>
          <sum type="sha256">c9b3a9f3f0f58bee22e12a25484cbecdd7c45a73cae04fb18fe43492f9829fba</sum>
        </package>
        <package name="glibc-nss-devel" version="2.34" release="272.el9_8" epoch="0" arch="s390x" src="glibc-2.34-272.el9_8.src.rpm">
          <filename>glibc-nss-devel-2.34-272.el9_8.s390x.rpm</filename>
          <sum type="sha256">e0c10380e074a6b3a8f9ba70be73e7dd369f50bf4a92c8deab7c197fec34a9cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33285</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-07-01 10:27:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411)
  * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198)


Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux 9.8 Bug] qla2xxx flash image validation failure [almalinux-9.8.z] (JIRA:AlmaLinux-181886)
  * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-9.8.z] (JIRA:AlmaLinux-182540)
  * tegra-se fixes and updates [almalinux-9.8.z] (JIRA:AlmaLinux-182760)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33285" id="RHSA-2026:33285" type="rhsa" title="RHSA-2026:33285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31411" id="CVE-2026-31411" type="cve" title="CVE-2026-31411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43198" id="CVE-2026-43198" type="cve" title="CVE-2026-43198"/>
      <reference href="https://bugzilla.redhat.com/2456521" id="2456521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467228" id="2467228" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-33285.html" id="ALSA-2026:33285" type="self" title="ALSA-2026:33285"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.20.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">25706344357f3924f70e09af9589e34c9bed9d65c1e0a2272ed546750e123b48</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.20.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">8f0f40dbe672a2914a984498dabc58278b6770a50fb5233a4a646ca158eb03f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33501</id>
    <title>Important: giflib security update</title>
    <issued date="2026-06-30 00:00:00"/>
    <updated date="2026-07-01 13:39:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>giflib security update</summary>
    <description>giflib is a library for reading and writing gif images.  

Security Fix(es):  

  * giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33501" id="RHSA-2026:33501" type="rhsa" title="RHSA-2026:33501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26740" id="CVE-2026-26740" type="cve" title="CVE-2026-26740"/>
      <reference href="https://bugzilla.redhat.com/2448747" id="2448747" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-33501.html" id="ALSA-2026:33501" type="self" title="ALSA-2026:33501"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="giflib-devel" version="5.2.1" release="10.el9_8.2" epoch="0" arch="s390x" src="giflib-5.2.1-10.el9_8.2.src.rpm">
          <filename>giflib-devel-5.2.1-10.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">bb79604f64fa83c931434d27150fd57033c5411a03683a0934629e930cb1981d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33512</id>
    <title>Important: ruby security update</title>
    <issued date="2026-06-30 00:00:00"/>
    <updated date="2026-07-01 13:41:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ruby security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)
  * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33512" id="RHSA-2026:33512" type="rhsa" title="RHSA-2026:33512"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42246" id="CVE-2026-42246" type="cve" title="CVE-2026-42246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42258" id="CVE-2026-42258" type="cve" title="CVE-2026-42258"/>
      <reference href="https://bugzilla.redhat.com/2468498" id="2468498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468499" id="2468499" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-33512.html" id="ALSA-2026:33512" type="self" title="ALSA-2026:33512"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="ruby-doc" version="3.0.7" release="167.el9_8" epoch="0" arch="noarch" src="ruby-3.0.7-167.el9_8.src.rpm">
          <filename>ruby-doc-3.0.7-167.el9_8.noarch.rpm</filename>
          <sum type="sha256">b8f118e66d4cfca0e379d47fc279003251a1a7a6c5748e8cd32d51a663c369af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:34156</id>
    <title>Moderate: rrdtool security update</title>
    <issued date="2026-07-01 00:00:00"/>
    <updated date="2026-07-01 13:35:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>rrdtool security update</summary>
    <description>The round robin database (RRD) system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create applications using its Perl, Python, Ruby, Lua, Tcl, and PHP bindings. The data is stored in a compact manner that does not expand over time, and RRDtool provides the user with useful graphs by processing the data to enforce a certain data density.  

Security Fix(es):  

  * rrdtool: Stack buffer overflow in rrdcached handle_request_create() allows local privilege escalation via unbounded DS/RRA arguments (CVE-2026-43958)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:34156" id="RHSA-2026:34156" type="rhsa" title="RHSA-2026:34156"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43958" id="CVE-2026-43958" type="cve" title="CVE-2026-43958"/>
      <reference href="https://bugzilla.redhat.com/2460932" id="2460932" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-34156.html" id="ALSA-2026:34156" type="self" title="ALSA-2026:34156"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="rrdtool-devel" version="1.7.2" release="22.el9_8" epoch="0" arch="s390x" src="rrdtool-1.7.2-22.el9_8.src.rpm">
          <filename>rrdtool-devel-1.7.2-22.el9_8.s390x.rpm</filename>
          <sum type="sha256">04bdd8954872c6b2954d6a579d06753ddcf3ce449740d44cb57f9062df78b407</sum>
        </package>
        <package name="rrdtool-ruby" version="1.7.2" release="22.el9_8" epoch="0" arch="s390x" src="rrdtool-1.7.2-22.el9_8.src.rpm">
          <filename>rrdtool-ruby-1.7.2-22.el9_8.s390x.rpm</filename>
          <sum type="sha256">21188a45eddf1d43a5c922b16a62c4810bb11811a03036c8be64aa91ab702ecf</sum>
        </package>
        <package name="rrdtool-tcl" version="1.7.2" release="22.el9_8" epoch="0" arch="s390x" src="rrdtool-1.7.2-22.el9_8.src.rpm">
          <filename>rrdtool-tcl-1.7.2-22.el9_8.s390x.rpm</filename>
          <sum type="sha256">296c1498f0a8ff8af7ca3d9c2622808ddbd324d5072c6dae0dc71d7375bbf8d1</sum>
        </package>
        <package name="rrdtool-lua" version="1.7.2" release="22.el9_8" epoch="0" arch="s390x" src="rrdtool-1.7.2-22.el9_8.src.rpm">
          <filename>rrdtool-lua-1.7.2-22.el9_8.s390x.rpm</filename>
          <sum type="sha256">6051bc32bb6758a5e00de1c96a725940fb763f1c9ce81ed5801f350b1c801ed7</sum>
        </package>
        <package name="python3-rrdtool" version="1.7.2" release="22.el9_8" epoch="0" arch="s390x" src="rrdtool-1.7.2-22.el9_8.src.rpm">
          <filename>python3-rrdtool-1.7.2-22.el9_8.s390x.rpm</filename>
          <sum type="sha256">b46a6a56bb44f73f4ca286f1423c7ff7c974cc6c3dbcaf6a728cdfb6dad29866</sum>
        </package>
        <package name="rrdtool-doc" version="1.7.2" release="22.el9_8" epoch="0" arch="s390x" src="rrdtool-1.7.2-22.el9_8.src.rpm">
          <filename>rrdtool-doc-1.7.2-22.el9_8.s390x.rpm</filename>
          <sum type="sha256">e27b42e9d31a46eca2fcd204d61cf77bf8b73a6815d6a576192033d5bc22be4f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3488</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-02 00:00:00"/>
    <updated date="2026-03-04 10:30:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168)
  * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085)
  * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3488" id="RHSA-2026:3488" type="rhsa" title="RHSA-2026:3488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40168" id="CVE-2025-40168" type="cve" title="CVE-2025-40168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71085" id="CVE-2025-71085" type="cve" title="CVE-2025-71085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23097" id="CVE-2026-23097" type="cve" title="CVE-2026-23097"/>
      <reference href="https://bugzilla.redhat.com/2414482" id="2414482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429026" id="2429026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436802" id="2436802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3488.html" id="ALSA-2026:3488" type="self" title="ALSA-2026:3488"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">0953c3a0805a53c3fe1a6dd171072a14ea07531aae0e8f69ee134a60c999d226</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.36.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">7399ed9c3ceb839b07e176c6e129e8adb7a15ca5b0a8938ecd8a83bfd94c173f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36018</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-06 00:00:00"/>
    <updated date="2026-07-08 14:10:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)
  * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276)
  * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323)
  * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)
  * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
  * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)
  * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155)
  * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244)
  * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)
  * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)
  * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)


Bug Fix(es) and Enhancement(s):  

  * WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [almalinux-9.8.z] (JIRA:AlmaLinux-160966)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36018" id="RHSA-2026:36018" type="rhsa" title="RHSA-2026:36018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10263" id="CVE-2025-10263" type="cve" title="CVE-2025-10263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43112" id="CVE-2026-43112" type="cve" title="CVE-2026-43112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43276" id="CVE-2026-43276" type="cve" title="CVE-2026-43276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46116" id="CVE-2026-46116" type="cve" title="CVE-2026-46116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46155" id="CVE-2026-46155" type="cve" title="CVE-2026-46155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46209" id="CVE-2026-46209" type="cve" title="CVE-2026-46209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46227" id="CVE-2026-46227" type="cve" title="CVE-2026-46227"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46244" id="CVE-2026-46244" type="cve" title="CVE-2026-46244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46259" id="CVE-2026-46259" type="cve" title="CVE-2026-46259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46316" id="CVE-2026-46316" type="cve" title="CVE-2026-46316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46323" id="CVE-2026-46323" type="cve" title="CVE-2026-46323"/>
      <reference href="https://bugzilla.redhat.com/2467015" id="2467015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467113" id="2467113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479832" id="2479832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482523" id="2482523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482564" id="2482564" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482636" id="2482636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482660" id="2482660" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2484451" id="2484451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2484477" id="2484477" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486958" id="2486958" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486982" id="2486982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36018.html" id="ALSA-2026:36018" type="self" title="ALSA-2026:36018"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.22.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">46e62eb6ab297b4f87a3059b61f5063628ca60d4146a59a1ddf34ff267030ce9</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.22.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">8092f51888fd6a3e916a6bda640386f5c24a6701e7e670041a98a71a017304d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36187</id>
    <title>Important: perl-HTTP-Daemon security update</title>
    <issued date="2026-07-07 00:00:00"/>
    <updated date="2026-07-08 11:47:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-HTTP-Daemon security update</summary>
    <description>The perl-HTTP-Daemon package includes the [HTTP::Daemon](HTTP::Daemon) class, a subclass of IO::Socket::IP. Instances of the [HTTP::Daemon](HTTP::Daemon) class are HTTP/1.1 servers that listen on a socket for incoming requests.  

Security Fix(es):  

  * perl-HTTP-Daemon: [HTTP::Daemon:](HTTP::Daemon:) Arbitrary code execution via OS command injection in send_file() (CVE-2026-8450)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36187" id="RHSA-2026:36187" type="rhsa" title="RHSA-2026:36187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-8450" id="CVE-2026-8450" type="cve" title="CVE-2026-8450"/>
      <reference href="https://bugzilla.redhat.com/2481773" id="2481773" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36187.html" id="ALSA-2026:36187" type="self" title="ALSA-2026:36187"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="perl-HTTP-Daemon" version="6.12" release="6.el9_8.1" epoch="0" arch="noarch" src="perl-HTTP-Daemon-6.12-6.el9_8.1.src.rpm">
          <filename>perl-HTTP-Daemon-6.12-6.el9_8.1.noarch.rpm</filename>
          <sum type="sha256">7ccd0b8da3d5b0145c065678e99330c75c2530fc2eb51d3841c2d6293f6eb0e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36195</id>
    <title>Important: 389-ds-base security update</title>
    <issued date="2026-07-07 00:00:00"/>
    <updated date="2026-07-08 11:49:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.  

Security Fix(es):  

  * 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND (CVE-2026-11610)
  * 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (CVE-2026-11774)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36195" id="RHSA-2026:36195" type="rhsa" title="RHSA-2026:36195"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11610" id="CVE-2026-11610" type="cve" title="CVE-2026-11610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11774" id="CVE-2026-11774" type="cve" title="CVE-2026-11774"/>
      <reference href="https://bugzilla.redhat.com/2484414" id="2484414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2484916" id="2484916" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36195.html" id="ALSA-2026:36195" type="self" title="ALSA-2026:36195"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="389-ds-base-devel" version="2.8.0" release="8.el9_8" epoch="0" arch="s390x" src="389-ds-base-2.8.0-8.el9_8.src.rpm">
          <filename>389-ds-base-devel-2.8.0-8.el9_8.s390x.rpm</filename>
          <sum type="sha256">cf72aeb6fd9b2c481459d338c3cef8ebfb9b1861dc0d4e66ebbb20ee02b7050e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36210</id>
    <title>Moderate: freeipmi security update</title>
    <issued date="2026-07-07 00:00:00"/>
    <updated date="2026-07-08 11:49:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeipmi security update</summary>
    <description>The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.  

Security Fix(es):  

  * freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client (CVE-2026-50031)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36210" id="RHSA-2026:36210" type="rhsa" title="RHSA-2026:36210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50031" id="CVE-2026-50031" type="cve" title="CVE-2026-50031"/>
      <reference href="https://bugzilla.redhat.com/2484296" id="2484296" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36210.html" id="ALSA-2026:36210" type="self" title="ALSA-2026:36210"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="freeipmi-devel" version="1.6.18" release="1.el9_8" epoch="0" arch="s390x" src="freeipmi-1.6.18-1.el9_8.src.rpm">
          <filename>freeipmi-devel-1.6.18-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">a5064e61d777acc027e270067e5ce6eabd2260d39370a76f8316934616c4496d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36331</id>
    <title>Important: nginx security, bug fix, and enhancement update</title>
    <issued date="2026-07-07 00:00:00"/>
    <updated date="2026-07-08 11:45:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nginx security, bug fix, and enhancement update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055)


Bug Fix(es) and Enhancement(s):  

  * nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes [almalinux-9.8.z] (JIRA:AlmaLinux-190800)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36331" id="RHSA-2026:36331" type="rhsa" title="RHSA-2026:36331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42055" id="CVE-2026-42055" type="cve" title="CVE-2026-42055"/>
      <reference href="https://bugzilla.redhat.com/2489866" id="2489866" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36331.html" id="ALSA-2026:36331" type="self" title="ALSA-2026:36331"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="nginx-mod-devel" version="1.20.1" release="28.el9_8.4.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-28.el9_8.4.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.20.1-28.el9_8.4.alma.1.s390x.rpm</filename>
          <sum type="sha256">7f42deae2bf33725fcf8485ae1e457f4f3f6da9cb1d608d507e2ed96034fda85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36645</id>
    <title>Important: kernel update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-09 11:24:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating  
system.  

Security Fix(es):  

  * kernel: eventpoll: defer struct eventpoll free to RCU grace period


(CVE-2026-43074)  

  * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF


(CVE-2026-46242)  

  * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite (CVE-2026-53266)


Bug Fix(es) and Enhancement(s):  

  * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite [almalinux-9.8.z] (JIRA:AlmaLinux-182344)
  * [AlmaLinux 9] Bonding reports unknown speed/duplex for tg3 interface [almalinux-9.8.z] (JIRA:AlmaLinux-182768)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36645" id="RHSA-2026:36645" type="rhsa" title="RHSA-2026:36645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43074" id="CVE-2026-43074" type="cve" title="CVE-2026-43074"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46242" id="CVE-2026-46242" type="cve" title="CVE-2026-46242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53266" id="CVE-2026-53266" type="cve" title="CVE-2026-53266"/>
      <reference href="https://bugzilla.redhat.com/2467019" id="2467019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483519" id="2483519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485368" id="2485368" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36645.html" id="ALSA-2026:36645" type="self" title="ALSA-2026:36645"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.23.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">9e4b22d6bd93fbe8ad57e97467ed4c7d991b9aa14a0cbee065e2c8cfe0b75976</sum>
        </package>
        <package name="libperf" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.23.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">b283dbac642f3938f755cb8ec7c2b3940ae03f32eb0f1035eb92490525dcaf11</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36777</id>
    <title>Important: unbound security update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-31 12:37:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Unbound: Denial of Service via excessive EDNS options (CVE-2026-41292)
  * unbound: Unbound: Cache manipulation via 'ghost domain names' attack (CVE-2026-40622)
  * unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets (CVE-2026-44390)
  * unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic (CVE-2026-42534)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36777" id="RHSA-2026:36777" type="rhsa" title="RHSA-2026:36777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40622" id="CVE-2026-40622" type="cve" title="CVE-2026-40622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41292" id="CVE-2026-41292" type="cve" title="CVE-2026-41292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42534" id="CVE-2026-42534" type="cve" title="CVE-2026-42534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44390" id="CVE-2026-44390" type="cve" title="CVE-2026-44390"/>
      <reference href="https://bugzilla.redhat.com/2480125" id="2480125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480130" id="2480130" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480131" id="2480131" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36777.html" id="ALSA-2026:36777" type="self" title="ALSA-2026:36777"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="unbound-devel" version="1.24.2" release="3.el9_8.2" epoch="0" arch="s390x" src="unbound-1.24.2-3.el9_8.2.src.rpm">
          <filename>unbound-devel-1.24.2-3.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">83ebffaecfdcc2d38a7f7de6c67036e61efd0d15ddb448f8aa12c6d03ba0c7b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36834</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-10 09:21:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tile_list_obu parser byte/bit confusion (CVE-2026-52718)
  * gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder (CVE-2026-52719)
  * gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb (CVE-2026-52720)
  * gstreamer1-plugins-bad-free: GStreamer: Signed integer overflow in VMnc decoder cursor payload handling (CVE-2026-52722)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36834" id="RHSA-2026:36834" type="rhsa" title="RHSA-2026:36834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52718" id="CVE-2026-52718" type="cve" title="CVE-2026-52718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52719" id="CVE-2026-52719" type="cve" title="CVE-2026-52719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52720" id="CVE-2026-52720" type="cve" title="CVE-2026-52720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52722" id="CVE-2026-52722" type="cve" title="CVE-2026-52722"/>
      <reference href="https://bugzilla.redhat.com/2486328" id="2486328" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486353" id="2486353" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486731" id="2486731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486733" id="2486733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36834.html" id="ALSA-2026:36834" type="self" title="ALSA-2026:36834"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.22.12" release="7.el9_8.1" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-7.el9_8.1.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">b368c6b180d9303b7df361a0501d7cc1ea6b5ead9145ac9dc425f71b90d96a23</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36957</id>
    <title>Important: kernel security update</title>
    <issued date="2026-07-09 00:00:00"/>
    <updated date="2026-07-10 09:18:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)
  * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)
  * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36957" id="RHSA-2026:36957" type="rhsa" title="RHSA-2026:36957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71066" id="CVE-2025-71066" type="cve" title="CVE-2025-71066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46113" id="CVE-2026-46113" type="cve" title="CVE-2026-46113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53359" id="CVE-2026-53359" type="cve" title="CVE-2026-53359"/>
      <reference href="https://bugzilla.redhat.com/2429036" id="2429036" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482587" id="2482587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2497033" id="2497033" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36957.html" id="ALSA-2026:36957" type="self" title="ALSA-2026:36957"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.24.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">cae70525e6ed741253f79b8b1236cdeae252644f0caeb89aceca99b2a6a59a63</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.24.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">d47682124c0fec7658bfc0062445f424045b35a07abe8c1e0e5dad78d986120c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:37207</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-07-09 00:00:00"/>
    <updated date="2026-07-13 09:38:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution (CVE-2026-45700)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:37207" id="RHSA-2026:37207" type="rhsa" title="RHSA-2026:37207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45700" id="CVE-2026-45700" type="cve" title="CVE-2026-45700"/>
      <reference href="https://bugzilla.redhat.com/2483470" id="2483470" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-37207.html" id="ALSA-2026:37207" type="self" title="ALSA-2026:37207"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libwinpr-devel" version="2.11.7" release="7.el9_8.4" epoch="2" arch="s390x" src="freerdp-2.11.7-7.el9_8.4.src.rpm">
          <filename>libwinpr-devel-2.11.7-7.el9_8.4.s390x.rpm</filename>
          <sum type="sha256">068f5484a29f945176707d383ce8f0bf91fed555c18f4a8127fc3f0be9f255d8</sum>
        </package>
        <package name="freerdp-devel" version="2.11.7" release="7.el9_8.4" epoch="2" arch="s390x" src="freerdp-2.11.7-7.el9_8.4.src.rpm">
          <filename>freerdp-devel-2.11.7-7.el9_8.4.s390x.rpm</filename>
          <sum type="sha256">ed1d8436875fc3c6ba98dd460dba3c867616e36e3500f6336bbbab8067d12fe6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3730</id>
    <title>Important: postgresql security update</title>
    <issued date="2026-03-04 00:00:00"/>
    <updated date="2026-03-11 10:01:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)
  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)
  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3730" id="RHSA-2026:3730" type="rhsa" title="RHSA-2026:3730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2004" id="CVE-2026-2004" type="cve" title="CVE-2026-2004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2005" id="CVE-2026-2005" type="cve" title="CVE-2026-2005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2006" id="CVE-2026-2006" type="cve" title="CVE-2026-2006"/>
      <reference href="https://bugzilla.redhat.com/2439324" id="2439324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439325" id="2439325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439326" id="2439326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3730.html" id="ALSA-2026:3730" type="self" title="ALSA-2026:3730"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="postgresql-docs" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-docs-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">384aaa1a64a7f2819f3eba7671cc4c229e6dc2af0a4b63a2e488aa993428363b</sum>
        </package>
        <package name="postgresql-test" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-test-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">5200032bae054878d387d6d0e0385b4e29e37fdd7f08000e36540849c97bd2f9</sum>
        </package>
        <package name="postgresql-private-devel" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-private-devel-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">8657bd7ec627ed119e04ef960cae7d723980a207be7b90c3352017aa585f6239</sum>
        </package>
        <package name="postgresql-server-devel" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-server-devel-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">915147fb48ac0c69d95fb31c2224e7b8f766476e14376e129060a08c9574cde4</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.23" release="2.el9_7" epoch="0" arch="noarch" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-test-rpm-macros-13.23-2.el9_7.noarch.rpm</filename>
          <sum type="sha256">9bc6f1d37d6520e5f2e03b04c3ae18345783ee6bd8725a4785f7fcfd8df0d299</sum>
        </package>
        <package name="postgresql-static" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-static-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">b58ca89c5fbf0ee4e29549de36aee1d99a114c9f1ea96445408d4ce8ad2ddf59</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.23" release="2.el9_7" epoch="0" arch="s390x" src="postgresql-13.23-2.el9_7.src.rpm">
          <filename>postgresql-upgrade-devel-13.23-2.el9_7.s390x.rpm</filename>
          <sum type="sha256">c5d9b493ca0c2aa7c7d4f89e89fd4138ade064ebb372a4e61f52bf92a53303f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38486</id>
    <title>Important: xorg-x11-server security update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-14 08:54:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38486" id="RHSA-2026:38486" type="rhsa" title="RHSA-2026:38486"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-55999" id="CVE-2026-55999" type="cve" title="CVE-2026-55999"/>
      <reference href="https://bugzilla.redhat.com/2496165" id="2496165" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-38486.html" id="ALSA-2026:38486" type="self" title="ALSA-2026:38486"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="34.el9_8.3" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-34.el9_8.3.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-34.el9_8.3.noarch.rpm</filename>
          <sum type="sha256">48499a138a6f93c1ab1264a01a39bb13c0536e0479c9928d112ae873477ec932</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="34.el9_8.3" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-34.el9_8.3.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-34.el9_8.3.s390x.rpm</filename>
          <sum type="sha256">facc020114b01c2ea7c54942ebe9ae392522ec0612a57c923ec5645e3e7f425c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38490</id>
    <title>Important: xorg-x11-server-Xwayland security update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-08-12 12:02:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)
  * X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38490" id="RHSA-2026:38490" type="rhsa" title="RHSA-2026:38490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-55999" id="CVE-2026-55999" type="cve" title="CVE-2026-55999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-56000" id="CVE-2026-56000" type="cve" title="CVE-2026-56000"/>
      <reference href="https://bugzilla.redhat.com/2496165" id="2496165" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2496193" id="2496193" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-38490.html" id="ALSA-2026:38490" type="self" title="ALSA-2026:38490"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="xorg-x11-server-Xwayland-devel" version="24.1.9" release="4.el9_8.3" epoch="0" arch="s390x" src="xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-24.1.9-4.el9_8.3.s390x.rpm</filename>
          <sum type="sha256">913754a1fa1cfe61aba86a9f0c870c91ee4d63d58f2605f0b0175fea15befc5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38491</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-13 20:53:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling (CVE-2026-22979)
  * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499)
  * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086)
  * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)
  * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166)


Bug Fix(es) and Enhancement(s):  

  * Kernel panic very early during boot while reading a tracefs file (available_filter_functions) due to invalid module name pointer [9.8.z] (JIRA:AlmaLinux-183236)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38491" id="RHSA-2026:38491" type="rhsa" title="RHSA-2026:38491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22979" id="CVE-2026-22979" type="cve" title="CVE-2026-22979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43499" id="CVE-2026-43499" type="cve" title="CVE-2026-43499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46086" id="CVE-2026-46086" type="cve" title="CVE-2026-46086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53016" id="CVE-2026-53016" type="cve" title="CVE-2026-53016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53166" id="CVE-2026-53166" type="cve" title="CVE-2026-53166"/>
      <reference href="https://bugzilla.redhat.com/2432402" id="2432402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480453" id="2480453" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481989" id="2481989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492269" id="2492269" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492805" id="2492805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-38491.html" id="ALSA-2026:38491" type="self" title="ALSA-2026:38491"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.25.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">56a9251166f20dfae15ffa1ba2755b7443006be8ae02b023b2792f52e17b8749</sum>
        </package>
        <package name="libperf" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.25.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">d53a2521685a2a6ef4eef39e74a4b3c2f5c5f4a4294b9d26f3211adc7fe31b54</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38498</id>
    <title>Important: openexr security update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-14 07:37:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openexr security update</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  

Security Fix(es):  

  * OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing (CVE-2026-41142)
  * OpenEXR: OpenEXR: Information disclosure and denial of service via malformed EXR files (CVE-2026-42216)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38498" id="RHSA-2026:38498" type="rhsa" title="RHSA-2026:38498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41142" id="CVE-2026-41142" type="cve" title="CVE-2026-41142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42216" id="CVE-2026-42216" type="cve" title="CVE-2026-42216"/>
      <reference href="https://bugzilla.redhat.com/2467623" id="2467623" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467633" id="2467633" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-38498.html" id="ALSA-2026:38498" type="self" title="ALSA-2026:38498"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="openexr-devel" version="3.1.1" release="3.el9_8.3" epoch="0" arch="s390x" src="openexr-3.1.1-3.el9_8.3.src.rpm">
          <filename>openexr-devel-3.1.1-3.el9_8.3.s390x.rpm</filename>
          <sum type="sha256">15b8db6a2ab65d11093128d4a7a35793b6e39970ed2add3b084ffe1c2b55ed6a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39309</id>
    <title>Low: capstone security update</title>
    <issued date="2026-07-14 00:00:00"/>
    <updated date="2026-07-17 10:09:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>capstone security update</summary>
    <description>Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.  

Security Fix(es):  

  * capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39309" id="RHSA-2026:39309" type="rhsa" title="RHSA-2026:39309"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68114" id="CVE-2025-68114" type="cve" title="CVE-2025-68114"/>
      <reference href="https://bugzilla.redhat.com/2423416" id="2423416" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-39309.html" id="ALSA-2026:39309" type="self" title="ALSA-2026:39309"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="python3-capstone" version="4.0.2" release="13.el9_8" epoch="0" arch="s390x" src="capstone-4.0.2-13.el9_8.src.rpm">
          <filename>python3-capstone-4.0.2-13.el9_8.s390x.rpm</filename>
          <sum type="sha256">62d1b88f9f15d4d1d96f60ef36919f0c00401c3e5ac05328983927000cb91026</sum>
        </package>
        <package name="capstone-devel" version="4.0.2" release="13.el9_8" epoch="0" arch="s390x" src="capstone-4.0.2-13.el9_8.src.rpm">
          <filename>capstone-devel-4.0.2-13.el9_8.s390x.rpm</filename>
          <sum type="sha256">b8ebd88154ea87c4da8dca53b833d8bd1c1cabb8efb0d8fde573a6fe28c5517e</sum>
        </package>
        <package name="capstone-java" version="4.0.2" release="13.el9_8" epoch="0" arch="noarch" src="capstone-4.0.2-13.el9_8.src.rpm">
          <filename>capstone-java-4.0.2-13.el9_8.noarch.rpm</filename>
          <sum type="sha256">dc79dd0cf954c31a91b07d6c72a509f4dd1e0d453e13741b7bc54e876124392e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39315</id>
    <title>Moderate: libsolv security update</title>
    <issued date="2026-07-14 00:00:00"/>
    <updated date="2026-07-15 08:43:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsolv security update</summary>
    <description>The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm.  

Security Fix(es):  

  * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39315" id="RHSA-2026:39315" type="rhsa" title="RHSA-2026:39315"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-48864" id="CVE-2026-48864" type="cve" title="CVE-2026-48864"/>
      <reference href="https://bugzilla.redhat.com/2460425" id="2460425" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-39315.html" id="ALSA-2026:39315" type="self" title="ALSA-2026:39315"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libsolv-tools" version="0.7.24" release="6.el9_8" epoch="0" arch="s390x" src="libsolv-0.7.24-6.el9_8.src.rpm">
          <filename>libsolv-tools-0.7.24-6.el9_8.s390x.rpm</filename>
          <sum type="sha256">826e8bf07117284acb3a6fc8fa9ca3dcb3b0627d22aba75a3a288130a3cd1742</sum>
        </package>
        <package name="libsolv-devel" version="0.7.24" release="6.el9_8" epoch="0" arch="s390x" src="libsolv-0.7.24-6.el9_8.src.rpm">
          <filename>libsolv-devel-0.7.24-6.el9_8.s390x.rpm</filename>
          <sum type="sha256">d5d0c4ab31a89fb5ba485ede0887949aee846f7f87ccf30e24cdeb41e8446941</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3940</id>
    <title>Moderate: nfs-utils security update</title>
    <issued date="2026-03-05 00:00:00"/>
    <updated date="2026-03-13 09:30:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nfs-utils security update</summary>
    <description>The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.   

Security Fix(es):  

  * nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3940" id="RHSA-2026:3940" type="rhsa" title="RHSA-2026:3940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12801" id="CVE-2025-12801" type="cve" title="CVE-2025-12801"/>
      <reference href="https://bugzilla.redhat.com/2413081" id="2413081" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3940.html" id="ALSA-2026:3940" type="self" title="ALSA-2026:3940"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libnfsidmap-devel" version="2.5.4" release="38.el9_7.3" epoch="1" arch="s390x" src="nfs-utils-2.5.4-38.el9_7.3.src.rpm">
          <filename>libnfsidmap-devel-2.5.4-38.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">304a309a4bb082c62ec62ac9afbddffd2c491606a3fcd09235f2c9421031c335</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39576</id>
    <title>Important: cifs-utils security, bug fix, and enhancement update</title>
    <issued date="2026-07-15 00:00:00"/>
    <updated date="2026-07-16 09:01:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cifs-utils security, bug fix, and enhancement update</summary>
    <description>The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.  

Security Fix(es):  

  * cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)


Bug Fix(es) and Enhancement(s):  

  * cifs-utils: regression with kerberos mount [almalinux-9.8.z] (JIRA:AlmaLinux-192982)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39576" id="RHSA-2026:39576" type="rhsa" title="RHSA-2026:39576"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12505" id="CVE-2026-12505" type="cve" title="CVE-2026-12505"/>
      <reference href="https://bugzilla.redhat.com/2489805" id="2489805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-39576.html" id="ALSA-2026:39576" type="self" title="ALSA-2026:39576"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="cifs-utils-devel" version="7.6" release="2.el9_8" epoch="0" arch="s390x" src="cifs-utils-7.6-2.el9_8.src.rpm">
          <filename>cifs-utils-devel-7.6-2.el9_8.s390x.rpm</filename>
          <sum type="sha256">4f465e6b1c8e3b69acc08d7c8f35f5adab6c69d92bafce5ace18f0b3a58ca3c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3966</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-11 10:09:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free (CVE-2025-38106)
  * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3966" id="RHSA-2026:3966" type="rhsa" title="RHSA-2026:3966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38106" id="CVE-2025-38106" type="cve" title="CVE-2025-38106"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23001" id="CVE-2026-23001" type="cve" title="CVE-2026-23001"/>
      <reference href="https://bugzilla.redhat.com/2376077" id="2376077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432664" id="2432664" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3966.html" id="ALSA-2026:3966" type="self" title="ALSA-2026:3966"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">02131c75431287a80c9d597ef49065d0a7fd96e713be4556ac77a06df8279717</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.38.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">404942413fd50d6aa0d9510dd0bc59c309d7d22d5a8b0d2a2996aecb24e6ec1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39771</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-07-15 00:00:00"/>
    <updated date="2026-07-15 12:27:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39771" id="RHSA-2026:39771" type="rhsa" title="RHSA-2026:39771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-15308" id="CVE-2026-15308" type="cve" title="CVE-2026-15308"/>
      <reference href="https://bugzilla.redhat.com/2498608" id="2498608" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-39771.html" id="ALSA-2026:39771" type="self" title="ALSA-2026:39771"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="python3.12-idle" version="3.12.13" release="3.el9_8.1" epoch="0" arch="s390x" src="python3.12-3.12.13-3.el9_8.1.src.rpm">
          <filename>python3.12-idle-3.12.13-3.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">554353ad1b83520d6a36ee4574ac4c92f3645bb4b1285f9ee10b28b5d744e1fd</sum>
        </package>
        <package name="python3.12-test" version="3.12.13" release="3.el9_8.1" epoch="0" arch="s390x" src="python3.12-3.12.13-3.el9_8.1.src.rpm">
          <filename>python3.12-test-3.12.13-3.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">d0b216d64d0373f2d2d5f5054440b318f9b4fc4df72519ec44a30ddb9dbda0e7</sum>
        </package>
        <package name="python3.12-debug" version="3.12.13" release="3.el9_8.1" epoch="0" arch="s390x" src="python3.12-3.12.13-3.el9_8.1.src.rpm">
          <filename>python3.12-debug-3.12.13-3.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">fa851c47698163f59b800483203076a99bead3246a369ec98bf3b52ed2cbe430</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:39798</id>
    <title>Important: python3.9 security, bug fix, and enhancement update</title>
    <issued date="2026-07-15 00:00:00"/>
    <updated date="2026-07-15 12:41:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security, bug fix, and enhancement update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308)


Bug Fix(es) and Enhancement(s):  

  * python3.9 test_ssl fails ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data (_ssl.c:4192) [almalinux-9.8.z] (JIRA:AlmaLinux-194207)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:39798" id="RHSA-2026:39798" type="rhsa" title="RHSA-2026:39798"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-15308" id="CVE-2026-15308" type="cve" title="CVE-2026-15308"/>
      <reference href="https://bugzilla.redhat.com/2498608" id="2498608" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-39798.html" id="ALSA-2026:39798" type="self" title="ALSA-2026:39798"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="python3-idle" version="3.9.25" release="7.el9_8.2" epoch="0" arch="s390x" src="python3.9-3.9.25-7.el9_8.2.src.rpm">
          <filename>python3-idle-3.9.25-7.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">3670b17de436c36fb5a408b863babcb480dbc3bb77de001cdd6e8e1629842936</sum>
        </package>
        <package name="python3-debug" version="3.9.25" release="7.el9_8.2" epoch="0" arch="s390x" src="python3.9-3.9.25-7.el9_8.2.src.rpm">
          <filename>python3-debug-3.9.25-7.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">8c7b50503eede74f0bcc4d2948beb35a05ce3ed2dcf8ce16a764b1ed5b2b7b77</sum>
        </package>
        <package name="python3-test" version="3.9.25" release="7.el9_8.2" epoch="0" arch="s390x" src="python3.9-3.9.25-7.el9_8.2.src.rpm">
          <filename>python3-test-3.9.25-7.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">a4678320a9d71223b39a7abd744080047427199211f7720364cdef971c634ad4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4165</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-10 20:08:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4165" id="RHSA-2026:4165" type="rhsa" title="RHSA-2026:4165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4165.html" id="ALSA-2026:4165" type="self" title="ALSA-2026:4165"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3.12-test" version="3.12.12" release="4.el9_7.1" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.1.src.rpm">
          <filename>python3.12-test-3.12.12-4.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">2b7687a49fd41ee4239c1f631756ff0abef8067dd3113e39dbdce45d450b1315</sum>
        </package>
        <package name="python3.12-debug" version="3.12.12" release="4.el9_7.1" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.1.src.rpm">
          <filename>python3.12-debug-3.12.12-4.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">d37cadd8dbbb6e152e24c9e084fefa3d571007c5098aae8556b68bfb90a14078</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="4.el9_7.1" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.1.src.rpm">
          <filename>python3.12-idle-3.12.12-4.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">fcb15e0ee004453f00668ea1a2c9dccfcdcdbb1ec4055fd267538e288fb9905f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4168</id>
    <title>Moderate: python3.9 security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-13 09:25:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4168" id="RHSA-2026:4168" type="rhsa" title="RHSA-2026:4168"/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4168.html" id="ALSA-2026:4168" type="self" title="ALSA-2026:4168"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-15366.html" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-15367.html" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-0865.html" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-1299.html" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3-test" version="3.9.25" release="3.el9_7.1" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.1.src.rpm">
          <filename>python3-test-3.9.25-3.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">11501dd69a84de4e40cd8fe2dec8e87e7e9d9d12dcdfe4345bda2f92b236b2ca</sum>
        </package>
        <package name="python3-idle" version="3.9.25" release="3.el9_7.1" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.1.src.rpm">
          <filename>python3-idle-3.9.25-3.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">7b5ba7d682292ba9b19fb9926fd291782af8896bd58c2fc66a90555531cadb63</sum>
        </package>
        <package name="python3-debug" version="3.9.25" release="3.el9_7.1" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.1.src.rpm">
          <filename>python3-debug-3.9.25-3.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">f03440b3a564307943ff27f5989c27c9f536ada149812fb9f8578fe66cd5ddfd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:41894</id>
    <title>Important: .NET 8.0 security, bug fix, and enhancement update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-31 12:32:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29.  

Security Fix(es):  

  * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651)
  * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108)
  * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170)
  * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300)
  * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304)
  * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302)
  * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650)
  * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528)
  * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649)
  * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526)
  * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646)
  * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525)
  * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527)
  * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648)
  * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659)
  * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524)


Bug Fix(es) and Enhancement(s):  

  * Update .NET 8.0 to SDK 8.0.129 and Runtime 8.0.29 [almalinux-9.8.z] (JIRA:AlmaLinux-192467)
  * dotnet8.0: Reduce time to detect hanging builds during .NET RPM builds (c9s) [almalinux-9.8.z] (JIRA:AlmaLinux-192337)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:41894" id="RHSA-2026:41894" type="rhsa" title="RHSA-2026:41894"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47300" id="CVE-2026-47300" type="cve" title="CVE-2026-47300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47302" id="CVE-2026-47302" type="cve" title="CVE-2026-47302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47303" id="CVE-2026-47303" type="cve" title="CVE-2026-47303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47304" id="CVE-2026-47304" type="cve" title="CVE-2026-47304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50524" id="CVE-2026-50524" type="cve" title="CVE-2026-50524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50525" id="CVE-2026-50525" type="cve" title="CVE-2026-50525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50526" id="CVE-2026-50526" type="cve" title="CVE-2026-50526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50527" id="CVE-2026-50527" type="cve" title="CVE-2026-50527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50528" id="CVE-2026-50528" type="cve" title="CVE-2026-50528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50646" id="CVE-2026-50646" type="cve" title="CVE-2026-50646"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50648" id="CVE-2026-50648" type="cve" title="CVE-2026-50648"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50649" id="CVE-2026-50649" type="cve" title="CVE-2026-50649"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50650" id="CVE-2026-50650" type="cve" title="CVE-2026-50650"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50651" id="CVE-2026-50651" type="cve" title="CVE-2026-50651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50659" id="CVE-2026-50659" type="cve" title="CVE-2026-50659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-56170" id="CVE-2026-56170" type="cve" title="CVE-2026-56170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-57108" id="CVE-2026-57108" type="cve" title="CVE-2026-57108"/>
      <reference href="https://bugzilla.redhat.com/2499217" id="2499217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500109" id="2500109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500189" id="2500189" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500492" id="2500492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500502" id="2500502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500509" id="2500509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500515" id="2500515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500556" id="2500556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500562" id="2500562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500563" id="2500563" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500565" id="2500565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500577" id="2500577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500580" id="2500580" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500581" id="2500581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500587" id="2500587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500593" id="2500593" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-41894.html" id="ALSA-2026:41894" type="self" title="ALSA-2026:41894"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.129" release="1.el9_8" epoch="0" arch="s390x" src="dotnet8.0-8.0.129-1.el9_8.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">596c162a48dc3f7772e3211b95f5d2ff355bffbf2cd13d63df1732117780ea1d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:41896</id>
    <title>Important: .NET 9.0 security, bug fix, and enhancement update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-31 12:37:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18.  

Security Fix(es):  

  * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651)
  * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108)
  * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170)
  * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300)
  * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304)
  * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302)
  * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650)
  * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528)
  * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649)
  * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526)
  * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646)
  * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525)
  * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527)
  * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648)
  * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659)
  * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524)


Bug Fix(es) and Enhancement(s):  

  * Update .NET 9.0 to SDK 9.0.119 and Runtime 9.0.18 [almalinux-9.8.z] (JIRA:AlmaLinux-192472)
  * dotnet9.0: Reduce time to detect hanging builds during .NET RPM builds (c9s) [almalinux-9.8.z] (JIRA:AlmaLinux-192338)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:41896" id="RHSA-2026:41896" type="rhsa" title="RHSA-2026:41896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47300" id="CVE-2026-47300" type="cve" title="CVE-2026-47300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47302" id="CVE-2026-47302" type="cve" title="CVE-2026-47302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47303" id="CVE-2026-47303" type="cve" title="CVE-2026-47303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47304" id="CVE-2026-47304" type="cve" title="CVE-2026-47304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50524" id="CVE-2026-50524" type="cve" title="CVE-2026-50524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50525" id="CVE-2026-50525" type="cve" title="CVE-2026-50525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50526" id="CVE-2026-50526" type="cve" title="CVE-2026-50526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50527" id="CVE-2026-50527" type="cve" title="CVE-2026-50527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50528" id="CVE-2026-50528" type="cve" title="CVE-2026-50528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50646" id="CVE-2026-50646" type="cve" title="CVE-2026-50646"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50648" id="CVE-2026-50648" type="cve" title="CVE-2026-50648"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50649" id="CVE-2026-50649" type="cve" title="CVE-2026-50649"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50650" id="CVE-2026-50650" type="cve" title="CVE-2026-50650"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50651" id="CVE-2026-50651" type="cve" title="CVE-2026-50651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50659" id="CVE-2026-50659" type="cve" title="CVE-2026-50659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-56170" id="CVE-2026-56170" type="cve" title="CVE-2026-56170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-57108" id="CVE-2026-57108" type="cve" title="CVE-2026-57108"/>
      <reference href="https://bugzilla.redhat.com/2499217" id="2499217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500109" id="2500109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500189" id="2500189" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500492" id="2500492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500502" id="2500502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500509" id="2500509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500515" id="2500515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500556" id="2500556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500562" id="2500562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500563" id="2500563" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500565" id="2500565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500577" id="2500577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500580" id="2500580" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500581" id="2500581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500587" id="2500587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500593" id="2500593" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-41896.html" id="ALSA-2026:41896" type="self" title="ALSA-2026:41896"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.119" release="1.el9_8" epoch="0" arch="s390x" src="dotnet9.0-9.0.119-1.el9_8.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.119-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">e46a984281b088f158cf2130ff5bfa5befc82e377272e3798994b44eff528c04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:41898</id>
    <title>Important: .NET 10.0 security, bug fix, and enhancement update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-31 12:37:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10.  

Security Fix(es):  

  * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651)
  * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108)
  * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170)
  * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300)
  * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304)
  * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302)
  * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650)
  * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528)
  * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649)
  * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526)
  * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646)
  * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525)
  * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527)
  * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648)
  * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659)
  * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524)


Bug Fix(es) and Enhancement(s):  

  * Update .NET 10.0 to SDK 10.0.110 and Runtime 10.0.10 [almalinux-9.8.z] (JIRA:AlmaLinux-192462)
  * dotnet10.0: Reduce time to detect hanging builds during .NET RPM builds (c9s) [almalinux-9.8.z] (JIRA:AlmaLinux-192336)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:41898" id="RHSA-2026:41898" type="rhsa" title="RHSA-2026:41898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47300" id="CVE-2026-47300" type="cve" title="CVE-2026-47300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47302" id="CVE-2026-47302" type="cve" title="CVE-2026-47302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47303" id="CVE-2026-47303" type="cve" title="CVE-2026-47303"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47304" id="CVE-2026-47304" type="cve" title="CVE-2026-47304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50524" id="CVE-2026-50524" type="cve" title="CVE-2026-50524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50525" id="CVE-2026-50525" type="cve" title="CVE-2026-50525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50526" id="CVE-2026-50526" type="cve" title="CVE-2026-50526"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50527" id="CVE-2026-50527" type="cve" title="CVE-2026-50527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50528" id="CVE-2026-50528" type="cve" title="CVE-2026-50528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50646" id="CVE-2026-50646" type="cve" title="CVE-2026-50646"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50648" id="CVE-2026-50648" type="cve" title="CVE-2026-50648"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50649" id="CVE-2026-50649" type="cve" title="CVE-2026-50649"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50650" id="CVE-2026-50650" type="cve" title="CVE-2026-50650"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50651" id="CVE-2026-50651" type="cve" title="CVE-2026-50651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-50659" id="CVE-2026-50659" type="cve" title="CVE-2026-50659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-56170" id="CVE-2026-56170" type="cve" title="CVE-2026-56170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-57108" id="CVE-2026-57108" type="cve" title="CVE-2026-57108"/>
      <reference href="https://bugzilla.redhat.com/2499217" id="2499217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500109" id="2500109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500189" id="2500189" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500492" id="2500492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500502" id="2500502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500509" id="2500509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500515" id="2500515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500556" id="2500556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500562" id="2500562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500563" id="2500563" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500565" id="2500565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500577" id="2500577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500580" id="2500580" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500581" id="2500581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500587" id="2500587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2500593" id="2500593" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-41898.html" id="ALSA-2026:41898" type="self" title="ALSA-2026:41898"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.110" release="1.el9_8" epoch="0" arch="s390x" src="dotnet10.0-10.0.110-1.el9_8.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">8a7018670059e9b2c237ba8048364c6584358148ec1cdb8480925fc9f3650bb9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:41905</id>
    <title>Important: dovecot security update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-22 13:35:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.   

Security Fix(es):  

  * dovecot: Dovecot: Denial of Service via excessive IMAP bracing (CVE-2026-42006)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:41905" id="RHSA-2026:41905" type="rhsa" title="RHSA-2026:41905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42006" id="CVE-2026-42006" type="cve" title="CVE-2026-42006"/>
      <reference href="https://bugzilla.redhat.com/2476476" id="2476476" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-41905.html" id="ALSA-2026:41905" type="self" title="ALSA-2026:41905"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dovecot-devel" version="2.3.16" release="18.el9_8.1" epoch="1" arch="s390x" src="dovecot-2.3.16-18.el9_8.1.src.rpm">
          <filename>dovecot-devel-2.3.16-18.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">7d93631184b1b7985b97b93f8a14ea05babb9d9c8f5d7fae0c5d135030c9fd94</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:41949</id>
    <title>Important: python3.14 security update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-21 10:15:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.14 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:41949" id="RHSA-2026:41949" type="rhsa" title="RHSA-2026:41949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-15308" id="CVE-2026-15308" type="cve" title="CVE-2026-15308"/>
      <reference href="https://bugzilla.redhat.com/2498608" id="2498608" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-41949.html" id="ALSA-2026:41949" type="self" title="ALSA-2026:41949"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="python3.14-test" version="3.14.5" release="1.el9_8.1" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.1.src.rpm">
          <filename>python3.14-test-3.14.5-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">124e7c3e7e7b9321894dd6feb9dd6ca3233eccc4244ee9f13b78a621cc42b886</sum>
        </package>
        <package name="python3.14-freethreading-tkinter" version="3.14.5" release="1.el9_8.1" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.1.src.rpm">
          <filename>python3.14-freethreading-tkinter-3.14.5-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">13712b57fc29f9139710d4c37c28b6d8e85f0db5bcd27f036fe063dc248dba45</sum>
        </package>
        <package name="python3.14-freethreading-test" version="3.14.5" release="1.el9_8.1" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.1.src.rpm">
          <filename>python3.14-freethreading-test-3.14.5-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">76532549bdfce509b3a50a0b851b707b7de1466d1e1f77cb136f1c68137f40ef</sum>
        </package>
        <package name="python3.14-freethreading-libs" version="3.14.5" release="1.el9_8.1" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.1.src.rpm">
          <filename>python3.14-freethreading-libs-3.14.5-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">953eaab76155d19699a6db8c0af100cb208d693be4816560ce312cdb85af363c</sum>
        </package>
        <package name="python3.14-idle" version="3.14.5" release="1.el9_8.1" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.1.src.rpm">
          <filename>python3.14-idle-3.14.5-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">9653168e4aca4e58f8794e079da0b8dff08af553fcf79c9fcd069793d79e98eb</sum>
        </package>
        <package name="python3.14-freethreading-idle" version="3.14.5" release="1.el9_8.1" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.1.src.rpm">
          <filename>python3.14-freethreading-idle-3.14.5-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">aeed002263b020c399adfb8a34d2e6bf1fb49cd0c91b9f1a7dde7752368c9bc3</sum>
        </package>
        <package name="python3.14-freethreading" version="3.14.5" release="1.el9_8.1" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.1.src.rpm">
          <filename>python3.14-freethreading-3.14.5-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">d00e46fe84475e4522eea2c3b4ce6df7a0c924d436778e91b839e5196f8eb374</sum>
        </package>
        <package name="python3.14-freethreading-devel" version="3.14.5" release="1.el9_8.1" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.1.src.rpm">
          <filename>python3.14-freethreading-devel-3.14.5-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">df4ec388267daf6de0a17795a153b3cd2e54afad6f877a01109a49add03145af</sum>
        </package>
        <package name="python3.14-freethreading-debug" version="3.14.5" release="1.el9_8.1" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.1.src.rpm">
          <filename>python3.14-freethreading-debug-3.14.5-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">ed3e5ae91415010d6165c9ab428e6c1e3a4f404de191cf80c75d37bb936becf3</sum>
        </package>
        <package name="python3.14-debug" version="3.14.5" release="1.el9_8.1" epoch="0" arch="s390x" src="python3.14-3.14.5-1.el9_8.1.src.rpm">
          <filename>python3.14-debug-3.14.5-1.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">f94c5f7b6848323f39055f3971c262df0756db730d2d55c9bff47ecb5c17b078</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42089</id>
    <title>Important: glib2 security update</title>
    <issued date="2026-07-20 00:00:00"/>
    <updated date="2026-07-21 10:22:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42089" id="RHSA-2026:42089" type="rhsa" title="RHSA-2026:42089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58016" id="CVE-2026-58016" type="cve" title="CVE-2026-58016"/>
      <reference href="https://bugzilla.redhat.com/2492257" id="2492257" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-42089.html" id="ALSA-2026:42089" type="self" title="ALSA-2026:42089"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="glib2-static" version="2.68.4" release="19.el9_8.2" epoch="0" arch="s390x" src="glib2-2.68.4-19.el9_8.2.src.rpm">
          <filename>glib2-static-2.68.4-19.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">51b5dcdc4dc857e22f3de36ff9038b2e29fdb3e7d5be535bc11bdc6aded8ed20</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4216</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-13 09:19:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4216" id="RHSA-2026:4216" type="rhsa" title="RHSA-2026:4216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4216.html" id="ALSA-2026:4216" type="self" title="ALSA-2026:4216"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3.11-idle" version="3.11.13" release="5.1.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.1.el9_7.src.rpm">
          <filename>python3.11-idle-3.11.13-5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">7831e5eca0abcafb0d4ca249e17cdcf9e3ddf61806e15fbd7cdb3a391432f233</sum>
        </package>
        <package name="python3.11-test" version="3.11.13" release="5.1.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.1.el9_7.src.rpm">
          <filename>python3.11-test-3.11.13-5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b1ae84fd82f86f1c6009e8a8143dcfc8f1cc848689b8bfbbd8593dfe7ca6a7a9</sum>
        </package>
        <package name="python3.11-debug" version="3.11.13" release="5.1.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.1.el9_7.src.rpm">
          <filename>python3.11-debug-3.11.13-5.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">e9cd8c963ff8b46cfda4c7f6d8a222f786261f240b1a6b0bb328caa511978365</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42668</id>
    <title>Important: libtiff security update</title>
    <issued date="2026-07-21 00:00:00"/>
    <updated date="2026-07-22 10:07:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42668" id="RHSA-2026:42668" type="rhsa" title="RHSA-2026:42668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-12912" id="CVE-2026-12912" type="cve" title="CVE-2026-12912"/>
      <reference href="https://bugzilla.redhat.com/2492871" id="2492871" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-42668.html" id="ALSA-2026:42668" type="self" title="ALSA-2026:42668"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libtiff-tools" version="4.4.0" release="18.el9_8.1" epoch="0" arch="s390x" src="libtiff-4.4.0-18.el9_8.1.src.rpm">
          <filename>libtiff-tools-4.4.0-18.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">af800787a5d967d09edcf8dfe4333a5f5f577676075f8531dfebd07d330a8bc2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42887</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-07-22 00:00:00"/>
    <updated date="2026-07-24 08:14:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance TLS certificate handling (CVE-2026-46968)
  * JDK: Improve DTLS handshaking (CVE-2026-46917)
  * JDK: Enhance JPEG handling (CVE-2026-47010)
  * JDK: Enhance XBM image support (CVE-2026-47021)
  * JDK: Enhance Jar file processing (CVE-2026-47027)
  * JDK: Improve certification checking (CVE-2026-60147)
  * JDK: Enhance AWT ImagingLib (CVE-2026-47059)
  * JDK: Enhance Jar handling (CVE-2026-47063)
  * JDK: Update LCMS to 2.19 (CVE-2026-41254)


Enhancement(s):  

  * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212474, AlmaLinux-212475, AlmaLinux-212476, AlmaLinux-212477, AlmaLinux-212478, AlmaLinux-212479, AlmaLinux-212480, AlmaLinux-212481)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42887" id="RHSA-2026:42887" type="rhsa" title="RHSA-2026:42887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41254" id="CVE-2026-41254" type="cve" title="CVE-2026-41254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46917" id="CVE-2026-46917" type="cve" title="CVE-2026-46917"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46968" id="CVE-2026-46968" type="cve" title="CVE-2026-46968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47010" id="CVE-2026-47010" type="cve" title="CVE-2026-47010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47021" id="CVE-2026-47021" type="cve" title="CVE-2026-47021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47027" id="CVE-2026-47027" type="cve" title="CVE-2026-47027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47059" id="CVE-2026-47059" type="cve" title="CVE-2026-47059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47063" id="CVE-2026-47063" type="cve" title="CVE-2026-47063"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60147" id="CVE-2026-60147" type="cve" title="CVE-2026-60147"/>
      <reference href="https://bugzilla.redhat.com/2459420" id="2459420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502751" id="2502751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502782" id="2502782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502783" id="2502783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502784" id="2502784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502791" id="2502791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502792" id="2502792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502793" id="2502793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2503636" id="2503636" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-42887.html" id="ALSA-2026:42887" type="self" title="ALSA-2026:42887"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.20.0.8" release="1.2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">9e2a71947ef7ac3e77196577121aee6a4ad37be529dcaf01d1e1e44f6687c7f8</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.20.0.8" release="1.2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a5b07cd6927b5a8dab7ded92369014b29ffcc8d804bcb6d56be73488fb370cf3</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.20.0.8" release="1.2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b2ad813073bd2df4efa10fe2c77915be8093de86691fcf817e59af4d81d1ebae</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.20.0.8" release="1.2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">be7ea36067efd4198e44f2449ebb372fd35a442d1053946d9c74ee8ebd878f45</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.20.0.8" release="1.2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">bff19692b3cb04d5ba4d0807e1cd5d4d0b1716cc83669956318d10fa24e87b36</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.20.0.8" release="1.2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e81caae7a0e5bb6db40961fbdf10ab82aa08a2b3b16c07d73a2c9739f4b5a822</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.20.0.8" release="1.2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.20.0.8-1.2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.20.0.8-1.2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">e9b61921614c1fb84bd79d2d472b6c95ab869a2306f1778979b759fef56a17dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42895</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-07-22 00:00:00"/>
    <updated date="2026-07-24 08:12:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance TLS certificate handling (CVE-2026-46968)
  * JDK: Improve DTLS handshaking (CVE-2026-46917)
  * JDK: Enhance JPEG handling (CVE-2026-47010)
  * JDK: Enhance XBM image support (CVE-2026-47021)
  * JDK: Enhance Jar file processing (CVE-2026-47027)
  * JDK: Improve certification checking (CVE-2026-60147)
  * JDK: Enhance AWT ImagingLib (CVE-2026-47059)
  * JDK: Enhance Jar handling (CVE-2026-47063)
  * JDK: Update LCMS to 2.19 (CVE-2026-41254)


Enhancement(s):  

  * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212337, AlmaLinux-212338, AlmaLinux-212339, AlmaLinux-212340, AlmaLinux-212342, AlmaLinux-212343)


Bug Fix(es):  

  * In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (AlmaLinux-212353, AlmaLinux-212359, AlmaLinux-212360, AlmaLinux-212361)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42895" id="RHSA-2026:42895" type="rhsa" title="RHSA-2026:42895"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41254" id="CVE-2026-41254" type="cve" title="CVE-2026-41254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46917" id="CVE-2026-46917" type="cve" title="CVE-2026-46917"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46968" id="CVE-2026-46968" type="cve" title="CVE-2026-46968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47010" id="CVE-2026-47010" type="cve" title="CVE-2026-47010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47021" id="CVE-2026-47021" type="cve" title="CVE-2026-47021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47027" id="CVE-2026-47027" type="cve" title="CVE-2026-47027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47059" id="CVE-2026-47059" type="cve" title="CVE-2026-47059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-47063" id="CVE-2026-47063" type="cve" title="CVE-2026-47063"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-60147" id="CVE-2026-60147" type="cve" title="CVE-2026-60147"/>
      <reference href="https://bugzilla.redhat.com/2459420" id="2459420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502751" id="2502751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502782" id="2502782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502783" id="2502783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502784" id="2502784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502791" id="2502791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502792" id="2502792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502793" id="2502793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2503636" id="2503636" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-42895.html" id="ALSA-2026:42895" type="self" title="ALSA-2026:42895"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.12.0.8" release="1.2.el9.alma.2" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.2.el9.alma.2.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm</filename>
          <sum type="sha256">04d4410d49aefb945d6292c7e918fe5ab3051770568cdeb980f41fd2cd053489</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.12.0.8" release="1.2.el9.alma.2" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.2.el9.alma.2.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm</filename>
          <sum type="sha256">0e4cf087d43c2ac0504787229bf95c26c2ec797af2ad8b56c6906df8a1290c22</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.12.0.8" release="1.2.el9.alma.2" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.2.el9.alma.2.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm</filename>
          <sum type="sha256">4ba32e268c2df1389a4a2b0289ab723764f6a5767ca75908d34d7b09b63ef841</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.12.0.8" release="1.2.el9.alma.2" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.2.el9.alma.2.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm</filename>
          <sum type="sha256">c101c8dafb17ab057cc7b002958746811e83e3edfe00a95d2cf5e0738495fad9</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.12.0.8" release="1.2.el9.alma.2" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.2.el9.alma.2.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm</filename>
          <sum type="sha256">d0277e47a89912a0a4488784370555190f01459ad87bc9d2c7a4f434e9772d3c</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.12.0.8" release="1.2.el9.alma.2" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.2.el9.alma.2.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm</filename>
          <sum type="sha256">dc501136c8cb26f1d351c468c2bf98834f04b39e3563c5cf229c8e2d5612f478</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.12.0.8" release="1.2.el9.alma.2" epoch="1" arch="s390x" src="java-21-openjdk-21.0.12.0.8-1.2.el9.alma.2.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.12.0.8-1.2.el9.alma.2.s390x.rpm</filename>
          <sum type="sha256">fb9a90f15ce79a95f9ced8d10e5a34d87e61873ada8d444aa4993e9f6d9d4a2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42899</id>
    <title>Important: java-25-openjdk security update</title>
    <issued date="2026-07-22 00:00:00"/>
    <updated date="2026-08-06 13:10:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-25-openjdk security update</summary>
    <description>The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance TLS certificate handling (CVE-2026-46968)
  * JDK: Improve DTLS handshaking (CVE-2026-46917)
  * JDK: Enhance JPEG handling (CVE-2026-47010)
  * JDK: Enhance XBM image support (CVE-2026-47021)
  * JDK: Enhance Jar file processing (CVE-2026-47027)
  * JDK: Improve certification checking (CVE-2026-60147)
  * JDK: Enhance AWT ImagingLib (CVE-2026-47059)
  * JDK: Enhance Jar handling (CVE-2026-47063)
  * JDK: Update LCMS to 2.19 (CVE-2026-41254)


Enhancement(s):  

  * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-211046, AlmaLinux-211048)


Bug Fix(es):  

  * The performance of the Math.pow function regressed between OpenJDK 8 and OpenJDK 11. This was due to an absence of constant folding when applicable (for example, Math.pow(2,1) being replaced by 2). This release reintroduces this optimization. (AlmaLinux-211050, AlmaLinux-211052)
  * On AlmaLinux 9 systems, the alternatives list a JDK and architecture pair (for example, "java-11-openjdk.x86_64") followed by the path to the binary in brackets. AlmaLinux 10 systems have a simpler format that just lists the path. Because the OpenJDK 25 packages for AlmaLinux 9 were originally based on those from AlmaLinux 10, they used the simpler format. With this release, the format for OpenJDK 25 packages on AlmaLinux 9 is updated to be closer to other JDKs on that platform. (AlmaLinux-212650)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42899" id="RHSA-2026:42899" type="rhsa" title="RHSA-2026:42899"/>
      <reference href="https://bugzilla.redhat.com/2459420" id="2459420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502751" id="2502751" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502782" id="2502782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502783" id="2502783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502784" id="2502784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502791" id="2502791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502792" id="2502792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502793" id="2502793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2503636" id="2503636" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-42899.html" id="ALSA-2026:42899" type="self" title="ALSA-2026:42899"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-41254.html" id="CVE-2026-41254" type="cve" title="CVE-2026-41254"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-46917.html" id="CVE-2026-46917" type="cve" title="CVE-2026-46917"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-46968.html" id="CVE-2026-46968" type="cve" title="CVE-2026-46968"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-47010.html" id="CVE-2026-47010" type="cve" title="CVE-2026-47010"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-47021.html" id="CVE-2026-47021" type="cve" title="CVE-2026-47021"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-47027.html" id="CVE-2026-47027" type="cve" title="CVE-2026-47027"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-47059.html" id="CVE-2026-47059" type="cve" title="CVE-2026-47059"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-47063.html" id="CVE-2026-47063" type="cve" title="CVE-2026-47063"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-60147.html" id="CVE-2026-60147" type="cve" title="CVE-2026-60147"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="java-25-openjdk-devel-slowdebug" version="25.0.4.0.7" release="1.1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">2d4aeb7bfd047754d213165be96a741dd3f9f77b8bea1a21fb142148cb8963d1</sum>
        </package>
        <package name="java-25-openjdk-slowdebug" version="25.0.4.0.7" release="1.1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">355cca316d94e5bea18a1f4dc5fe49472e3b479390bd03e8adf9b31aa73c9f93</sum>
        </package>
        <package name="java-25-openjdk-demo-slowdebug" version="25.0.4.0.7" release="1.1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a284f8b49458c604417ee0872df4473de5cd5fc8759e0dc5b991226aedf0194c</sum>
        </package>
        <package name="java-25-openjdk-headless-slowdebug" version="25.0.4.0.7" release="1.1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a672d08a266526f64e176d6b46c31390423c90c201c96814a9bf5dd09c4b41cf</sum>
        </package>
        <package name="java-25-openjdk-static-libs-slowdebug" version="25.0.4.0.7" release="1.1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a6c4b5789e3aa3460f44ec84016d4c7f1d68c0c109172b7f09dc6d84fd0e4830</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter-slowdebug" version="25.0.4.0.7" release="1.1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c69d02e8326a4d35b9677b096dedd6a03f2b011eee15c7155c77c1dbc33d9a9c</sum>
        </package>
        <package name="java-25-openjdk-jmods-slowdebug" version="25.0.4.0.7" release="1.1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">cea5ce4a4d82f243aa91990da2120d8cee2b23e50a31e19cc96c2a5cf518c661</sum>
        </package>
        <package name="java-25-openjdk-src-slowdebug" version="25.0.4.0.7" release="1.1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.4.0.7-1.1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">faf5879227174572c4c359ba9acec8658d6e872eaf5a2dc45cfc28732e5bf003</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:42952</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-07-21 00:00:00"/>
    <updated date="2026-07-23 08:02:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928)
  * glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435)
  * glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:42952" id="RHSA-2026:42952" type="rhsa" title="RHSA-2026:42952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5435" id="CVE-2026-5435" type="cve" title="CVE-2026-5435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5928" id="CVE-2026-5928" type="cve" title="CVE-2026-5928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6238" id="CVE-2026-6238" type="cve" title="CVE-2026-6238"/>
      <reference href="https://bugzilla.redhat.com/2459854" id="2459854" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463465" id="2463465" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2463539" id="2463539" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-42952.html" id="ALSA-2026:42952" type="self" title="ALSA-2026:42952"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="nss_hesiod" version="2.34" release="274.el9_8" epoch="0" arch="s390x" src="glibc-2.34-274.el9_8.src.rpm">
          <filename>nss_hesiod-2.34-274.el9_8.s390x.rpm</filename>
          <sum type="sha256">12ce09b0af7ef6b9b01211316aa403383076ebdee711fe9cf711792207a82d1f</sum>
        </package>
        <package name="nss_db" version="2.34" release="274.el9_8" epoch="0" arch="s390x" src="glibc-2.34-274.el9_8.src.rpm">
          <filename>nss_db-2.34-274.el9_8.s390x.rpm</filename>
          <sum type="sha256">197543e1df874cdc1a049d276c02b552a1d63fe5151edb6318206c13e2b91bdb</sum>
        </package>
        <package name="glibc-static" version="2.34" release="274.el9_8" epoch="0" arch="s390x" src="glibc-2.34-274.el9_8.src.rpm">
          <filename>glibc-static-2.34-274.el9_8.s390x.rpm</filename>
          <sum type="sha256">41ad9215697ea18a265f72300b127fd413599294cc4094a97f297901c304043b</sum>
        </package>
        <package name="glibc-benchtests" version="2.34" release="274.el9_8" epoch="0" arch="s390x" src="glibc-2.34-274.el9_8.src.rpm">
          <filename>glibc-benchtests-2.34-274.el9_8.s390x.rpm</filename>
          <sum type="sha256">71954e349ef1e1f3a88bc306045284a1b9a9a380077c910b03f9d4c317862cbe</sum>
        </package>
        <package name="glibc-nss-devel" version="2.34" release="274.el9_8" epoch="0" arch="s390x" src="glibc-2.34-274.el9_8.src.rpm">
          <filename>glibc-nss-devel-2.34-274.el9_8.s390x.rpm</filename>
          <sum type="sha256">b36a8c94db234d033c85662a8a24f4f554f1442058fa0a5f0ee9f0c689f84409</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:43307</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-22 00:00:00"/>
    <updated date="2026-07-24 10:31:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113)
  * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110)
  * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)
  * kernel: fanotify: fix false positive on permission events (CVE-2026-46150)
  * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215)
  * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071)


Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux9] tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-9.8.z] (JIRA:AlmaLinux-183980)
  * [AlmaLinux-9.8.z]: mlx5: include bug fixes (JIRA:AlmaLinux-188121)
  * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-9.8.z] (JIRA:AlmaLinux-212061)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:43307" id="RHSA-2026:43307" type="rhsa" title="RHSA-2026:43307"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71113" id="CVE-2025-71113" type="cve" title="CVE-2025-71113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23110" id="CVE-2026-23110" type="cve" title="CVE-2026-23110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46150" id="CVE-2026-46150" type="cve" title="CVE-2026-46150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46215" id="CVE-2026-46215" type="cve" title="CVE-2026-46215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53071" id="CVE-2026-53071" type="cve" title="CVE-2026-53071"/>
      <reference href="https://bugzilla.redhat.com/2429611" id="2429611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436755" id="2436755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481972" id="2481972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482612" id="2482612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482615" id="2482615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492458" id="2492458" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-43307.html" id="ALSA-2026:43307" type="self" title="ALSA-2026:43307"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.29.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">5193b0ef497696d871ebee5c53886d7973afd614202ea79c3adf040c60701596</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.29.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">bb77cfdf37ce5e1fdd25ef17678fe0b6c7961d2726f96a93e83d3c77ae07bc27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4445</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-16 16:52:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime 10.0.4.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4445" id="RHSA-2026:4445" type="rhsa" title="RHSA-2026:4445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4445.html" id="ALSA-2026:4445" type="self" title="ALSA-2026:4445"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.104" release="1.el9_7" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el9_7.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">43b03c75688f433c18b89804206f6810627925c79ce6b493c7a6099012778d56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4447</id>
    <title>Important: libvpx security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-16 16:46:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4447" id="RHSA-2026:4447" type="rhsa" title="RHSA-2026:4447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2447" id="CVE-2026-2447" type="cve" title="CVE-2026-2447"/>
      <reference href="https://bugzilla.redhat.com/2440219" id="2440219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4447.html" id="ALSA-2026:4447" type="self" title="ALSA-2026:4447"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libvpx-devel" version="1.9.0" release="10.el9_7" epoch="0" arch="s390x" src="libvpx-1.9.0-10.el9_7.src.rpm">
          <filename>libvpx-devel-1.9.0-10.el9_7.s390x.rpm</filename>
          <sum type="sha256">6098cb861c37330eab431fb77f11f4f3c5f6f988b902598c7ee4a40c014a8cec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4454</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:17:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.125 and .NET Runtime 8.0.25.Security Fix(es):  

  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4454" id="RHSA-2026:4454" type="rhsa" title="RHSA-2026:4454"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4454.html" id="ALSA-2026:4454" type="self" title="ALSA-2026:4454"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.125" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el9_7.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.125-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">19c62784255718f237640bace10bacea37dc7fe08c1fe47671bf6483bb618025</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4456</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-16 16:41:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.115 and .NET Runtime 9.0.14.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4456" id="RHSA-2026:4456" type="rhsa" title="RHSA-2026:4456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4456.html" id="ALSA-2026:4456" type="self" title="ALSA-2026:4456"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.115" release="1.el9_7" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el9_7.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">9d87a3822e40da8d0b6fd8f9b9c33415d1ec276fb8a8ed9f8b93e03fa4246a3c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:45192</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-24 00:00:00"/>
    <updated date="2026-08-07 12:59:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)
  * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
  * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976)
  * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950)
  * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)


Bug Fix(es) and Enhancement(s):  

  * scsi device removal may hang from race with error recovery [almalinux-9.8.z] (JIRA:AlmaLinux-187412)
  * [AlmaLinux9] kvm fixes for 2026-07-21 [almalinux-9.8.z] (JIRA:AlmaLinux-213468)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:45192" id="RHSA-2026:45192" type="rhsa" title="RHSA-2026:45192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40026" id="CVE-2025-40026" type="cve" title="CVE-2025-40026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52950" id="CVE-2026-52950" type="cve" title="CVE-2026-52950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52976" id="CVE-2026-52976" type="cve" title="CVE-2026-52976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53006" id="CVE-2026-53006" type="cve" title="CVE-2026-53006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53059" id="CVE-2026-53059" type="cve" title="CVE-2026-53059"/>
      <reference href="https://bugzilla.redhat.com/2406712" id="2406712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492277" id="2492277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492284" id="2492284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492318" id="2492318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492363" id="2492363" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-45192.html" id="ALSA-2026:45192" type="self" title="ALSA-2026:45192"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2026-64561.html" id="CVE-2026-64561" type="cve" title="CVE-2026-64561"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="687.30.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.30.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.30.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">a3debd232891e4e0a1c10f564c092948ec0dd2c60d19994a6be8c582fd40b60c</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="687.30.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.30.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.30.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">b1fa30c2133abe7e2fd1883f2f014ab05c42ef5e09aa8abd31d25e622626745d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:47040</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-28 00:00:00"/>
    <updated date="2026-08-01 15:34:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797)
  * kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002)
  * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
  * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281)
  * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)


Bug Fix(es) and Enhancement(s):  

  * general protection fault during exportfs / nfsd4_revoke_states [almalinux-9.8.z] (JIRA:AlmaLinux-188257)
  * Enable Pretimeout Watchdog Panic Functionality on x86 [almalinux-9.8.z] (JIRA:AlmaLinux-193729)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:47040" id="RHSA-2026:47040" type="rhsa" title="RHSA-2026:47040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39797" id="CVE-2025-39797" type="cve" title="CVE-2025-39797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23002" id="CVE-2026-23002" type="cve" title="CVE-2026-23002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52973" id="CVE-2026-52973" type="cve" title="CVE-2026-52973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53281" id="CVE-2026-53281" type="cve" title="CVE-2026-53281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64017" id="CVE-2026-64017" type="cve" title="CVE-2026-64017"/>
      <reference href="https://bugzilla.redhat.com/2400057" id="2400057" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432666" id="2432666" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492413" id="2492413" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2493728" id="2493728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2502449" id="2502449" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-47040.html" id="ALSA-2026:47040" type="self" title="ALSA-2026:47040"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="687.31.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.31.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.31.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">45f13a5700b86d93c8e2fe9accd7863d32719a0aed7a16da4104f4d9a006bf4a</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="687.31.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.31.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.31.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">99138e4b8ecefb94163c6bb7f93566b05b7d5bfc7e0c68d6726cd39e50824cc3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:47084</id>
    <title>Important: libXfont2 security update</title>
    <issued date="2026-07-28 00:00:00"/>
    <updated date="2026-08-06 13:15:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libXfont2 security update</summary>
    <description>X.Org X11 libXfont2 runtime library  

Security Fix(es):  

  * libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)
  * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:47084" id="RHSA-2026:47084" type="rhsa" title="RHSA-2026:47084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-56001" id="CVE-2026-56001" type="cve" title="CVE-2026-56001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-56002" id="CVE-2026-56002" type="cve" title="CVE-2026-56002"/>
      <reference href="https://bugzilla.redhat.com/2496640" id="2496640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2496641" id="2496641" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-47084.html" id="ALSA-2026:47084" type="self" title="ALSA-2026:47084"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libXfont2-devel" version="2.0.3" release="12.el9_8.1" epoch="0" arch="s390x" src="libXfont2-2.0.3-12.el9_8.1.src.rpm">
          <filename>libXfont2-devel-2.0.3-12.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">55cb471da1ea0ac73764cc8a1c7644f7e95c2f15b3cdff60562367da2ea6f065</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:47178</id>
    <title>Important: yelp security update</title>
    <issued date="2026-07-28 00:00:00"/>
    <updated date="2026-08-06 13:17:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>yelp security update</summary>
    <description>Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.  

Security Fix(es):  

  * yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications (CVE-2026-13601)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:47178" id="RHSA-2026:47178" type="rhsa" title="RHSA-2026:47178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-13601" id="CVE-2026-13601" type="cve" title="CVE-2026-13601"/>
      <reference href="https://bugzilla.redhat.com/2494110" id="2494110" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-47178.html" id="ALSA-2026:47178" type="self" title="ALSA-2026:47178"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="yelp-devel" version="40.3" release="3.el9_8.1" epoch="2" arch="s390x" src="yelp-40.3-3.el9_8.1.src.rpm">
          <filename>yelp-devel-40.3-3.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">e50173cb4c62436492e33fe8de4d2defe87c14440bacf4b734f8c4f646b92413</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:47179</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2026-07-28 00:00:00"/>
    <updated date="2026-08-06 13:05:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer (CVE-2026-59691)
  * gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback (CVE-2026-59692)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:47179" id="RHSA-2026:47179" type="rhsa" title="RHSA-2026:47179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-59691" id="CVE-2026-59691" type="cve" title="CVE-2026-59691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-59692" id="CVE-2026-59692" type="cve" title="CVE-2026-59692"/>
      <reference href="https://bugzilla.redhat.com/2497343" id="2497343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2497344" id="2497344" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-47179.html" id="ALSA-2026:47179" type="self" title="ALSA-2026:47179"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.22.12" release="7.el9_8.3" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-7.el9_8.3.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.3.s390x.rpm</filename>
          <sum type="sha256">08e86c8aad6b2fb95a93cd4f7b173ef0ba3d6a403663f895eba830e4798851b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4759</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-20 07:31:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CVE-2025-39818)
  * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4759" id="RHSA-2026:4759" type="rhsa" title="RHSA-2026:4759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39818" id="CVE-2025-39818" type="cve" title="CVE-2025-39818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68800" id="CVE-2025-68800" type="cve" title="CVE-2025-68800"/>
      <reference href="https://bugzilla.redhat.com/2395797" id="2395797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429065" id="2429065" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4759.html" id="ALSA-2026:4759" type="self" title="ALSA-2026:4759"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">2b7822b4f24498c7b4368da51ecb1a9a01724f1a6533f77ce0adb327f1a2bca2</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.41.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">a35f4c1670d94aabb2c6b2ace1b699fb508ab129db4964d0fede8541c80a6718</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4828</id>
    <title>Moderate: mysql security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-19 15:05:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  

Security Fix(es):  

  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
  * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4828" id="RHSA-2026:4828" type="rhsa" title="RHSA-2026:4828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21936" id="CVE-2026-21936" type="cve" title="CVE-2026-21936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21937" id="CVE-2026-21937" type="cve" title="CVE-2026-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21941" id="CVE-2026-21941" type="cve" title="CVE-2026-21941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21948" id="CVE-2026-21948" type="cve" title="CVE-2026-21948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21964" id="CVE-2026-21964" type="cve" title="CVE-2026-21964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21968" id="CVE-2026-21968" type="cve" title="CVE-2026-21968"/>
      <reference href="https://bugzilla.redhat.com/2431384" id="2431384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431385" id="2431385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431402" id="2431402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431409" id="2431409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431413" id="2431413" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431431" id="2431431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4828.html" id="ALSA-2026:4828" type="self" title="ALSA-2026:4828"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="mysql-devel" version="8.0.45" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.45-1.el9_7.src.rpm">
          <filename>mysql-devel-8.0.45-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">66edf83d788c75ef7a527c00d03ae9451b1ccc6a7a2afdcab8c5477d8149de73</sum>
        </package>
        <package name="mysql-test" version="8.0.45" release="1.el9_7" epoch="0" arch="s390x" src="mysql-8.0.45-1.el9_7.src.rpm">
          <filename>mysql-test-8.0.45-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">eb3075cc4cdf24893fff7751cc1ea3ff4b860d661ec5ae3ff4978ac750bcbafc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4898</id>
    <title>Important: capstone security update</title>
    <issued date="2026-03-18 00:00:00"/>
    <updated date="2026-03-19 15:08:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>capstone security update</summary>
    <description>Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.  

Security Fix(es):  

  * capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)
  * capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4898" id="RHSA-2026:4898" type="rhsa" title="RHSA-2026:4898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-67873" id="CVE-2025-67873" type="cve" title="CVE-2025-67873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68114" id="CVE-2025-68114" type="cve" title="CVE-2025-68114"/>
      <reference href="https://bugzilla.redhat.com/2423416" id="2423416" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423419" id="2423419" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4898.html" id="ALSA-2026:4898" type="self" title="ALSA-2026:4898"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="capstone-devel" version="4.0.2" release="11.el9_7" epoch="0" arch="s390x" src="capstone-4.0.2-11.el9_7.src.rpm">
          <filename>capstone-devel-4.0.2-11.el9_7.s390x.rpm</filename>
          <sum type="sha256">5a7f969bfc17f1b57e369c516318fd7b0673d62967c8b3ce627fb04722594fd7</sum>
        </package>
        <package name="python3-capstone" version="4.0.2" release="11.el9_7" epoch="0" arch="s390x" src="capstone-4.0.2-11.el9_7.src.rpm">
          <filename>python3-capstone-4.0.2-11.el9_7.s390x.rpm</filename>
          <sum type="sha256">7461b252ce7fb7239b481af663bff8d5d54b78b762051b46ff80fb174098bcdc</sum>
        </package>
        <package name="capstone-java" version="4.0.2" release="11.el9_7" epoch="0" arch="noarch" src="capstone-4.0.2-11.el9_7.src.rpm">
          <filename>capstone-java-4.0.2-11.el9_7.noarch.rpm</filename>
          <sum type="sha256">9148e1b91a4f21330bcfcfec0fb3809e12ac0bc48c9f877a686b6afcc9e1e6bf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:49212</id>
    <title>Important: kernel security update</title>
    <issued date="2026-07-31 00:00:00"/>
    <updated date="2026-08-06 13:53:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923)
  * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)
  * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle ()
  * kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:49212" id="RHSA-2026:49212" type="rhsa" title="RHSA-2026:49212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52923" id="CVE-2026-52923" type="cve" title="CVE-2026-52923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-52993" id="CVE-2026-52993" type="cve" title="CVE-2026-52993"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64530" id="CVE-2026-64530" type="cve" title="CVE-2026-64530"/>
      <reference href="https://bugzilla.redhat.com/2492094" id="2492094" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492437" id="2492437" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504052" id="2504052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507345" id="2507345" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-49212.html" id="ALSA-2026:49212" type="self" title="ALSA-2026:49212"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="687.33.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.33.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.33.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">232f01f89e9005a3db6639b269ebefcc97063ae1ef1c22d7594a65ea2c981d42</sum>
        </package>
        <package name="libperf" version="5.14.0" release="687.33.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.33.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.33.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">32d7035d82655ba008aaf62483d1cbc62baec11bcd81aa5b3769c44d12577ba4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:49870</id>
    <title>Low: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-04 00:00:00"/>
    <updated date="2026-08-06 13:53:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214)


Bug Fix(es) and Enhancement(s):  

  * Possible regression with FM350GL [almalinux-9.8.z] (JIRA:AlmaLinux-184273)
  * AlmaLinux9: Fix downstream-only regression from 532af53c [almalinux-9.8.z] (JIRA:AlmaLinux-192430)
  * gfs2: xfstests generic/363 failure [almalinux-9.8.z] (JIRA:AlmaLinux-214021)
  * AlmaLinux 9: Backport b95e0e792822 [almalinux-9.8.z] (JIRA:AlmaLinux-216471)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:49870" id="RHSA-2026:49870" type="rhsa" title="RHSA-2026:49870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68214" id="CVE-2025-68214" type="cve" title="CVE-2025-68214"/>
      <reference href="https://bugzilla.redhat.com/2422686" id="2422686" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-49870.html" id="ALSA-2026:49870" type="self" title="ALSA-2026:49870"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="687.34.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.34.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.34.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">5a3086115c9a9a35b9ff5a8997a9240fd9f46a8b6b480dd4ce657962940d124d</sum>
        </package>
        <package name="libperf" version="5.14.0" release="687.34.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.34.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.34.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">f557a1ab3e2090d49d93edfe4c52c62ca517bc859f01731b6eceb1bc72b5215e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:50108</id>
    <title>Important: ldns security update</title>
    <issued date="2026-08-04 00:00:00"/>
    <updated date="2026-08-06 13:22:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ldns security update</summary>
    <description>The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to (for instance) create or sign packets.  

Security Fix(es):  

  * ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching (CVE-2026-10846)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:50108" id="RHSA-2026:50108" type="rhsa" title="RHSA-2026:50108"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-10846" id="CVE-2026-10846" type="cve" title="CVE-2026-10846"/>
      <reference href="https://bugzilla.redhat.com/2487437" id="2487437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-50108.html" id="ALSA-2026:50108" type="self" title="ALSA-2026:50108"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="ldns-devel" version="1.7.1" release="12.el9_8.1" epoch="0" arch="s390x" src="ldns-1.7.1-12.el9_8.1.src.rpm">
          <filename>ldns-devel-1.7.1-12.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">347bf4cff8e112fc8cc42a3ce829082ac71536bd22d927b1723769527a48eba6</sum>
        </package>
        <package name="ldns-doc" version="1.7.1" release="12.el9_8.1" epoch="0" arch="noarch" src="ldns-1.7.1-12.el9_8.1.src.rpm">
          <filename>ldns-doc-1.7.1-12.el9_8.1.noarch.rpm</filename>
          <sum type="sha256">7e158362aea06b2f4ea4f6ac69774898ce998bc5ff610ff22df26aa72729f57c</sum>
        </package>
        <package name="perl-ldns" version="1.7.1" release="12.el9_8.1" epoch="0" arch="s390x" src="ldns-1.7.1-12.el9_8.1.src.rpm">
          <filename>perl-ldns-1.7.1-12.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">b12528c4ba3daf7a51c86a609e17f68d9c0acd9b520350233bcfa39c4018d2b7</sum>
        </package>
        <package name="ldns-utils" version="1.7.1" release="12.el9_8.1" epoch="0" arch="s390x" src="ldns-1.7.1-12.el9_8.1.src.rpm">
          <filename>ldns-utils-1.7.1-12.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">f19472d1e8955a3859958a39ee025c0da1fde8f0d87f767359fa66a138a9e704</sum>
        </package>
        <package name="python3-ldns" version="1.7.1" release="12.el9_8.1" epoch="0" arch="s390x" src="ldns-1.7.1-12.el9_8.1.src.rpm">
          <filename>python3-ldns-1.7.1-12.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">fc3c36c6ffbe8124380dc9c2bae876623213c0642c25bb6fe989aa74b214e2bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:50141</id>
    <title>Important: sg3_utils security, bug fix, and enhancement update</title>
    <issued date="2026-08-04 00:00:00"/>
    <updated date="2026-08-06 13:21:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sg3_utils security, bug fix, and enhancement update</summary>
    <description>The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets.  

Security Fix(es):  

  * sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313)


Bug Fix(es) and Enhancement(s):  

  * sg_inq output conformance for SCSI name string and ATA fields [almalinux-9.8.z] (JIRA:AlmaLinux-188130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:50141" id="RHSA-2026:50141" type="rhsa" title="RHSA-2026:50141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-16313" id="CVE-2026-16313" type="cve" title="CVE-2026-16313"/>
      <reference href="https://bugzilla.redhat.com/2502845" id="2502845" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-50141.html" id="ALSA-2026:50141" type="self" title="ALSA-2026:50141"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="sg3_utils-devel" version="1.47" release="10.el9_8.1" epoch="0" arch="s390x" src="sg3_utils-1.47-10.el9_8.1.src.rpm">
          <filename>sg3_utils-devel-1.47-10.el9_8.1.s390x.rpm</filename>
          <sum type="sha256">d497cd8703c24dd28795393cbc51ddc5568d37c43f22775d034af91b9dd4e53b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:51035</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-06 00:00:00"/>
    <updated date="2026-08-07 15:25:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415)
  * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)


Bug Fix(es) and Enhancement(s):  

  * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-9.8.z] (JIRA:AlmaLinux-186331)
  * [AlmaLinux 9.4] Kernel memory reclaim bug [almalinux-9.8.z] (JIRA:AlmaLinux-211058)
  * Bond network interface is not coming up with MTU 9000 while vPMEM is enabled [almalinux-9.8.z] (JIRA:AlmaLinux-215575)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:51035" id="RHSA-2026:51035" type="rhsa" title="RHSA-2026:51035"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23415" id="CVE-2026-23415" type="cve" title="CVE-2026-23415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43450" id="CVE-2026-43450" type="cve" title="CVE-2026-43450"/>
      <reference href="https://bugzilla.redhat.com/2454320" id="2454320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468228" id="2468228" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-51035.html" id="ALSA-2026:51035" type="self" title="ALSA-2026:51035"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="687.36.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.36.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.36.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">5c8262fc4488fb69dea2cfef51df13f95cec2326b0f13dfacebbe1b73b69c986</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="687.36.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.36.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.36.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">6b54675b695368eefb1ab78867ad6136424d64c07d144da4f7b81b25be31e169</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:52395</id>
    <title>Important: postgresql security update</title>
    <issued date="2026-08-10 00:00:00"/>
    <updated date="2026-08-12 08:46:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql security update</summary>
    <description>PostgreSQL is an advanced object-relational database management system (DBMS).  

Security Fix(es):  

  * postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation (CVE-2026-6479)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:52395" id="RHSA-2026:52395" type="rhsa" title="RHSA-2026:52395"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6479" id="CVE-2026-6479" type="cve" title="CVE-2026-6479"/>
      <reference href="https://bugzilla.redhat.com/2477445" id="2477445" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-52395.html" id="ALSA-2026:52395" type="self" title="ALSA-2026:52395"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="postgresql-test" version="13.23" release="5.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-5.el9_8.src.rpm">
          <filename>postgresql-test-13.23-5.el9_8.s390x.rpm</filename>
          <sum type="sha256">3a2f959738302d6dfcf0e38eeb437dae34bfcf1a3132588b67a9a9551c3a32c5</sum>
        </package>
        <package name="postgresql-private-devel" version="13.23" release="5.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-5.el9_8.src.rpm">
          <filename>postgresql-private-devel-13.23-5.el9_8.s390x.rpm</filename>
          <sum type="sha256">69bc67fb59b6d24b5f11529381f2d7fdb2b08d2f9e15b315ca0f379e50f6cd24</sum>
        </package>
        <package name="postgresql-static" version="13.23" release="5.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-5.el9_8.src.rpm">
          <filename>postgresql-static-13.23-5.el9_8.s390x.rpm</filename>
          <sum type="sha256">8064b866a680a968b57ca7ffec887b33d364f5cfa180d7f74a514e813bbae129</sum>
        </package>
        <package name="postgresql-docs" version="13.23" release="5.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-5.el9_8.src.rpm">
          <filename>postgresql-docs-13.23-5.el9_8.s390x.rpm</filename>
          <sum type="sha256">82e67b1c2831d29b91537535f9d08b5ebe2ad61734749a82947d9767b0722919</sum>
        </package>
        <package name="postgresql-server-devel" version="13.23" release="5.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-5.el9_8.src.rpm">
          <filename>postgresql-server-devel-13.23-5.el9_8.s390x.rpm</filename>
          <sum type="sha256">aa019769b11a8cf018d4267216ca1adfbd95c756fdc8eb928ebda1c8f107f8f4</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="13.23" release="5.el9_8" epoch="0" arch="s390x" src="postgresql-13.23-5.el9_8.src.rpm">
          <filename>postgresql-upgrade-devel-13.23-5.el9_8.s390x.rpm</filename>
          <sum type="sha256">d06a48e7e9ceb161919dba430e5ed677412a0b5c54662703113899a818eb8263</sum>
        </package>
        <package name="postgresql-test-rpm-macros" version="13.23" release="5.el9_8" epoch="0" arch="noarch" src="postgresql-13.23-5.el9_8.src.rpm">
          <filename>postgresql-test-rpm-macros-13.23-5.el9_8.noarch.rpm</filename>
          <sum type="sha256">d732c71a16cd11972ca9f56da5ba1df03a091f44c271942eb352f1e41e040b86</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:53329</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-11 00:00:00"/>
    <updated date="2026-08-13 08:32:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530)
  * kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518)
  * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368)
  * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531)


Bug Fix(es) and Enhancement(s):  

  * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-9.8.z] (JIRA:AlmaLinux-213036)
  * AlmaLinux9.4 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-9.8.z] (JIRA:AlmaLinux-215578)
  * AlmaLinux9.4 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-9.8.z] (JIRA:AlmaLinux-215580)
  * cifs: periodic IO errors when rename races with lease break (JIRA:AlmaLinux-192999)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:53329" id="RHSA-2026:53329" type="rhsa" title="RHSA-2026:53329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-54518" id="CVE-2025-54518" type="cve" title="CVE-2025-54518"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31530" id="CVE-2026-31530" type="cve" title="CVE-2026-31530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64368" id="CVE-2026-64368" type="cve" title="CVE-2026-64368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64531" id="CVE-2026-64531" type="cve" title="CVE-2026-64531"/>
      <reference href="https://bugzilla.redhat.com/2460644" id="2460644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477784" id="2477784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507213" id="2507213" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2507402" id="2507402" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-53329.html" id="ALSA-2026:53329" type="self" title="ALSA-2026:53329"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libperf" version="5.14.0" release="687.38.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.38.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.38.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">47b0e2963381dd455cc690ac37b9a0bf61bac554ee4a79809b57e2af07f2d825</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="687.38.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.38.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.38.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">cd104a66a7d20ce955556d0f88556b5bed219eda924dae2aa5d607afce050d9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54268</id>
    <title>Important: python3.9 security update</title>
    <issued date="2026-08-12 00:00:00"/>
    <updated date="2026-08-13 09:21:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54268" id="RHSA-2026:54268" type="rhsa" title="RHSA-2026:54268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11940" id="CVE-2026-11940" type="cve" title="CVE-2026-11940"/>
      <reference href="https://bugzilla.redhat.com/2491848" id="2491848" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-54268.html" id="ALSA-2026:54268" type="self" title="ALSA-2026:54268"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="python3-idle" version="3.9.25" release="7.el9_8.3" epoch="0" arch="s390x" src="python3.9-3.9.25-7.el9_8.3.src.rpm">
          <filename>python3-idle-3.9.25-7.el9_8.3.s390x.rpm</filename>
          <sum type="sha256">83ae65573aab125709827cafd7e183ce1c0a13e623e251716f42c9fdb9f46705</sum>
        </package>
        <package name="python3-debug" version="3.9.25" release="7.el9_8.3" epoch="0" arch="s390x" src="python3.9-3.9.25-7.el9_8.3.src.rpm">
          <filename>python3-debug-3.9.25-7.el9_8.3.s390x.rpm</filename>
          <sum type="sha256">aedf603124ca67944cbd49210fda825eb35df40bf53502cc72e9f8cee581b6e6</sum>
        </package>
        <package name="python3-test" version="3.9.25" release="7.el9_8.3" epoch="0" arch="s390x" src="python3.9-3.9.25-7.el9_8.3.src.rpm">
          <filename>python3-test-3.9.25-7.el9_8.3.s390x.rpm</filename>
          <sum type="sha256">e650fb1110aca749beb734f552615be73b9c46cf817fb8f1874e2f5eb825d5c2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54443</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-08-12 00:00:00"/>
    <updated date="2026-08-18 12:11:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202)
  * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264)


Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux9] tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-9.8.z] (JIRA:AlmaLinux-214434)
  * Kernels 5.14.0-434+ may lose page table dirty bit (and page data) [almalinux-9.8.z] (JIRA:AlmaLinux-220787)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54443" id="RHSA-2026:54443" type="rhsa" title="RHSA-2026:54443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53202" id="CVE-2026-53202" type="cve" title="CVE-2026-53202"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53264" id="CVE-2026-53264" type="cve" title="CVE-2026-53264"/>
      <reference href="https://bugzilla.redhat.com/2492823" id="2492823" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492851" id="2492851" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-54443.html" id="ALSA-2026:54443" type="self" title="ALSA-2026:54443"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="687.39.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.39.1.el9_8.src.rpm">
          <filename>kernel-cross-headers-5.14.0-687.39.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">0d3c9f634cf8dccf0fb64cc18182577a2c73caaa886222aa4d0a0361d140ffcd</sum>
        </package>
        <package name="libperf" version="5.14.0" release="687.39.1.el9_8" epoch="0" arch="s390x" src="kernel-5.14.0-687.39.1.el9_8.src.rpm">
          <filename>libperf-5.14.0-687.39.1.el9_8.s390x.rpm</filename>
          <sum type="sha256">54bf0e1bb81cf55c8a27f9132af36ff874d1227cfb607ab57350fa6ca8df5016</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54487</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-08-13 00:00:00"/>
    <updated date="2026-08-14 12:47:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624)
  * FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299)
  * FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289)
  * FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow (CVE-2026-68580)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54487" id="RHSA-2026:54487" type="rhsa" title="RHSA-2026:54487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-64624" id="CVE-2026-64624" type="cve" title="CVE-2026-64624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-67289" id="CVE-2026-67289" type="cve" title="CVE-2026-67289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-67299" id="CVE-2026-67299" type="cve" title="CVE-2026-67299"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-68580" id="CVE-2026-68580" type="cve" title="CVE-2026-68580"/>
      <reference href="https://bugzilla.redhat.com/2503096" id="2503096" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2509985" id="2509985" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2510004" id="2510004" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2510125" id="2510125" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-54487.html" id="ALSA-2026:54487" type="self" title="ALSA-2026:54487"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="freerdp-devel" version="2.11.7" release="7.el9_8.5" epoch="2" arch="s390x" src="freerdp-2.11.7-7.el9_8.5.src.rpm">
          <filename>freerdp-devel-2.11.7-7.el9_8.5.s390x.rpm</filename>
          <sum type="sha256">5c39d4d1318c4ecb0394f683c129fee31e318d391f10e297aff356684d98c79e</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="7.el9_8.5" epoch="2" arch="s390x" src="freerdp-2.11.7-7.el9_8.5.src.rpm">
          <filename>libwinpr-devel-2.11.7-7.el9_8.5.s390x.rpm</filename>
          <sum type="sha256">ca1ec0fc4f188d011dc9f24f61954d059908778709145a1999a5979b06361fa7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54510</id>
    <title>Important: bind security update</title>
    <issued date="2026-08-13 00:00:00"/>
    <updated date="2026-08-14 08:57:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)
  * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)
  * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)
  * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)
  * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)
  * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54510" id="RHSA-2026:54510" type="rhsa" title="RHSA-2026:54510"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-10723" id="CVE-2026-10723" type="cve" title="CVE-2026-10723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11331" id="CVE-2026-11331" type="cve" title="CVE-2026-11331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11622" id="CVE-2026-11622" type="cve" title="CVE-2026-11622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11721" id="CVE-2026-11721" type="cve" title="CVE-2026-11721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-13204" id="CVE-2026-13204" type="cve" title="CVE-2026-13204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-13321" id="CVE-2026-13321" type="cve" title="CVE-2026-13321"/>
      <reference href="https://bugzilla.redhat.com/2503721" id="2503721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504166" id="2504166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504298" id="2504298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504338" id="2504338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504447" id="2504447" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504560" id="2504560" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-54510.html" id="ALSA-2026:54510" type="self" title="ALSA-2026:54510"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="bind-doc" version="9.16.23" release="40.el9_8.8" epoch="32" arch="noarch" src="bind-9.16.23-40.el9_8.8.src.rpm">
          <filename>bind-doc-9.16.23-40.el9_8.8.noarch.rpm</filename>
          <sum type="sha256">707e97caec593d461f991261508fa9381c00491912300c14df52d4d4823da370</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="40.el9_8.8" epoch="32" arch="s390x" src="bind-9.16.23-40.el9_8.8.src.rpm">
          <filename>bind-devel-9.16.23-40.el9_8.8.s390x.rpm</filename>
          <sum type="sha256">d9fc6998f482366df2af1205340ff36b2b5eeaf7420e738db650eba18a9123f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54574</id>
    <title>Important: .NET 8.0 security, bug fix, and enhancement update</title>
    <issued date="2026-08-13 00:00:00"/>
    <updated date="2026-08-14 13:45:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  

SDK version: 8.0.130  
Runtime version: 8.0.30  

Security Fix(es):  

  * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899)
  * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900)
  * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901)
  * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909)


Bug Fix(es) and Enhancement(s):  

  * Update .NET 8.0 to SDK 8.0.130 and Runtime 8.0.30 [almalinux-9.8.z] (JIRA:AlmaLinux-235471)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54574" id="RHSA-2026:54574" type="rhsa" title="RHSA-2026:54574"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62899" id="CVE-2026-62899" type="cve" title="CVE-2026-62899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62900" id="CVE-2026-62900" type="cve" title="CVE-2026-62900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62901" id="CVE-2026-62901" type="cve" title="CVE-2026-62901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62909" id="CVE-2026-62909" type="cve" title="CVE-2026-62909"/>
      <reference href="https://bugzilla.redhat.com/2512175" id="2512175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512179" id="2512179" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512180" id="2512180" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512185" id="2512185" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-54574.html" id="ALSA-2026:54574" type="self" title="ALSA-2026:54574"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.130" release="1.el9_8" epoch="0" arch="s390x" src="dotnet8.0-8.0.130-1.el9_8.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.130-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">c1efef6e9954ade95502d15ae92abcb592b873689bd36070135ad64ef727763a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:54662</id>
    <title>Moderate: nghttp2 security update</title>
    <issued date="2026-08-13 00:00:00"/>
    <updated date="2026-08-14 08:48:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.  

Security Fix(es):  

  * nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:54662" id="RHSA-2026:54662" type="rhsa" title="RHSA-2026:54662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58055" id="CVE-2026-58055" type="cve" title="CVE-2026-58055"/>
      <reference href="https://bugzilla.redhat.com/2493954" id="2493954" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-54662.html" id="ALSA-2026:54662" type="self" title="ALSA-2026:54662"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libnghttp2-devel" version="1.43.0" release="6.el9_8.2" epoch="0" arch="s390x" src="nghttp2-1.43.0-6.el9_8.2.src.rpm">
          <filename>libnghttp2-devel-1.43.0-6.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">040f10ac5bd6dba132a449d83b77a3a4e8e4edeb3b8dc76daad57a8333a8de99</sum>
        </package>
        <package name="nghttp2" version="1.43.0" release="6.el9_8.2" epoch="0" arch="s390x" src="nghttp2-1.43.0-6.el9_8.2.src.rpm">
          <filename>nghttp2-1.43.0-6.el9_8.2.s390x.rpm</filename>
          <sum type="sha256">19ddd39e6ff706449df71365379c7109bb024f98b6b6614110c939d715684b6f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55423</id>
    <title>Important: 389-ds-base security update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-18 08:54:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.  

Security Fix(es):  

  * 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770)
  * 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788)
  * 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55423" id="RHSA-2026:55423" type="rhsa" title="RHSA-2026:55423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11770" id="CVE-2026-11770" type="cve" title="CVE-2026-11770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11788" id="CVE-2026-11788" type="cve" title="CVE-2026-11788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-15722" id="CVE-2026-15722" type="cve" title="CVE-2026-15722"/>
      <reference href="https://bugzilla.redhat.com/2484802" id="2484802" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485423" id="2485423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2499961" id="2499961" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-55423.html" id="ALSA-2026:55423" type="self" title="ALSA-2026:55423"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="389-ds-base-devel" version="2.8.0" release="9.el9_8" epoch="0" arch="s390x" src="389-ds-base-2.8.0-9.el9_8.src.rpm">
          <filename>389-ds-base-devel-2.8.0-9.el9_8.s390x.rpm</filename>
          <sum type="sha256">2254887eb83738ad2895f0ed0aa9f41d445c73d326b5e082a03a29f824dc0893</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55440</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-18 08:53:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)
  * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)
  * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)
  * glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)
  * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)
  * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)
  * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55440" id="RHSA-2026:55440" type="rhsa" title="RHSA-2026:55440"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-15588" id="CVE-2026-15588" type="cve" title="CVE-2026-15588"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58010" id="CVE-2026-58010" type="cve" title="CVE-2026-58010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58011" id="CVE-2026-58011" type="cve" title="CVE-2026-58011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58012" id="CVE-2026-58012" type="cve" title="CVE-2026-58012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58013" id="CVE-2026-58013" type="cve" title="CVE-2026-58013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58014" id="CVE-2026-58014" type="cve" title="CVE-2026-58014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-58015" id="CVE-2026-58015" type="cve" title="CVE-2026-58015"/>
      <reference href="https://bugzilla.redhat.com/2492243" id="2492243" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492245" id="2492245" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492247" id="2492247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492248" id="2492248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492255" id="2492255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492256" id="2492256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2499675" id="2499675" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-55440.html" id="ALSA-2026:55440" type="self" title="ALSA-2026:55440"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="glib2-static" version="2.68.4" release="19.el9_8.9" epoch="0" arch="s390x" src="glib2-2.68.4-19.el9_8.9.src.rpm">
          <filename>glib2-static-2.68.4-19.el9_8.9.s390x.rpm</filename>
          <sum type="sha256">23f0583775fea0d41ef5204a41dae5b9bfb47778b832feb6fb07b62d61b9340e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55442</id>
    <title>Important: bind9.18 security update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-19 12:20:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.18 security update</summary>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  

Security Fix(es):  

  * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)
  * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)
  * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)
  * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)
  * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)
  * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55442" id="RHSA-2026:55442" type="rhsa" title="RHSA-2026:55442"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-10723" id="CVE-2026-10723" type="cve" title="CVE-2026-10723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11331" id="CVE-2026-11331" type="cve" title="CVE-2026-11331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11622" id="CVE-2026-11622" type="cve" title="CVE-2026-11622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-11721" id="CVE-2026-11721" type="cve" title="CVE-2026-11721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-13204" id="CVE-2026-13204" type="cve" title="CVE-2026-13204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-13321" id="CVE-2026-13321" type="cve" title="CVE-2026-13321"/>
      <reference href="https://bugzilla.redhat.com/2503721" id="2503721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504166" id="2504166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504298" id="2504298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504338" id="2504338" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504447" id="2504447" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2504560" id="2504560" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-55442.html" id="ALSA-2026:55442" type="self" title="ALSA-2026:55442"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="bind9.18-doc" version="9.18.29" release="14.el9_8.8" epoch="32" arch="noarch" src="bind9.18-9.18.29-14.el9_8.8.src.rpm">
          <filename>bind9.18-doc-9.18.29-14.el9_8.8.noarch.rpm</filename>
          <sum type="sha256">25810d7d4702c335e76c9bab862566f0691f40c2f421619204196cd55e0e2ec6</sum>
        </package>
        <package name="bind9.18-devel" version="9.18.29" release="14.el9_8.8" epoch="32" arch="s390x" src="bind9.18-9.18.29-14.el9_8.8.src.rpm">
          <filename>bind9.18-devel-9.18.29-14.el9_8.8.s390x.rpm</filename>
          <sum type="sha256">3062a3ea364e48e48e75a77f3098f199a13c54614b2de0f4d8df83116f16ef9e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55447</id>
    <title>Important: libXfont2 security update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-18 08:50:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libXfont2 security update</summary>
    <description>X.Org X11 libXfont2 runtime library  

Security Fix(es):  

  * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
  * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55447" id="RHSA-2026:55447" type="rhsa" title="RHSA-2026:55447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44950" id="CVE-2026-44950" type="cve" title="CVE-2026-44950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-59679" id="CVE-2026-59679" type="cve" title="CVE-2026-59679"/>
      <reference href="https://bugzilla.redhat.com/2509620" id="2509620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2509622" id="2509622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-55447.html" id="ALSA-2026:55447" type="self" title="ALSA-2026:55447"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="libXfont2-devel" version="2.0.3" release="12.el9_8.3" epoch="0" arch="s390x" src="libXfont2-2.0.3-12.el9_8.3.src.rpm">
          <filename>libXfont2-devel-2.0.3-12.el9_8.3.s390x.rpm</filename>
          <sum type="sha256">c8f68b4265542d1c2c473325c7adba0e22702d2683834176191dca7d72ef31b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55841</id>
    <title>Important: unbound security update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-18 08:51:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>unbound security update</summary>
    <description>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.   

Security Fix(es):  

  * unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes (CVE-2026-44690)
  * unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option (CVE-2026-55973)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55841" id="RHSA-2026:55841" type="rhsa" title="RHSA-2026:55841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-44690" id="CVE-2026-44690" type="cve" title="CVE-2026-44690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-55973" id="CVE-2026-55973" type="cve" title="CVE-2026-55973"/>
      <reference href="https://bugzilla.redhat.com/2503063" id="2503063" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2503075" id="2503075" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-55841.html" id="ALSA-2026:55841" type="self" title="ALSA-2026:55841"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="unbound-devel" version="1.24.2" release="3.el9_8.4" epoch="0" arch="s390x" src="unbound-1.24.2-3.el9_8.4.src.rpm">
          <filename>unbound-devel-1.24.2-3.el9_8.4.s390x.rpm</filename>
          <sum type="sha256">48af32bd087c4108cdd9e76ef54b90022a10677a9bc01cfda83f7f49d954044b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55856</id>
    <title>Important: .NET 9.0 security, bug fix, and enhancement update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-18 08:49:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  

SDK version: 9.0.120  
Runtime version: 9.0.19  

Security Fix(es):  

  * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899)
  * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900)
  * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901)
  * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909)


Bug Fix(es) and Enhancement(s):  

  * Update .NET 9.0 to SDK 9.0.120 and Runtime 9.0.19 [almalinux-9.8.z] (JIRA:AlmaLinux-235476)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55856" id="RHSA-2026:55856" type="rhsa" title="RHSA-2026:55856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62899" id="CVE-2026-62899" type="cve" title="CVE-2026-62899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62900" id="CVE-2026-62900" type="cve" title="CVE-2026-62900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62901" id="CVE-2026-62901" type="cve" title="CVE-2026-62901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62909" id="CVE-2026-62909" type="cve" title="CVE-2026-62909"/>
      <reference href="https://bugzilla.redhat.com/2512175" id="2512175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512179" id="2512179" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512180" id="2512180" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512185" id="2512185" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-55856.html" id="ALSA-2026:55856" type="self" title="ALSA-2026:55856"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.120" release="1.el9_8" epoch="0" arch="s390x" src="dotnet9.0-9.0.120-1.el9_8.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">2bbd824f88f502cf309e8c7880f7953682bc98a38b83695c4bf7072a2003db1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55857</id>
    <title>Important: .NET 10.0 security, bug fix, and enhancement update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-18 08:49:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  

SDK version: 10.0.111  
Runtime version: 10.0.11  

Security Fix(es):  

  * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899)
  * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900)
  * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901)
  * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909)


Bug Fix(es) and Enhancement(s):  

  * Update .NET 10.0 to SDK 10.0.111 and Runtime 10.0.11 [almalinux-9.8.z] (JIRA:AlmaLinux-235481)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55857" id="RHSA-2026:55857" type="rhsa" title="RHSA-2026:55857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62899" id="CVE-2026-62899" type="cve" title="CVE-2026-62899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62900" id="CVE-2026-62900" type="cve" title="CVE-2026-62900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62901" id="CVE-2026-62901" type="cve" title="CVE-2026-62901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-62909" id="CVE-2026-62909" type="cve" title="CVE-2026-62909"/>
      <reference href="https://bugzilla.redhat.com/2512175" id="2512175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512179" id="2512179" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512180" id="2512180" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2512185" id="2512185" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-55857.html" id="ALSA-2026:55857" type="self" title="ALSA-2026:55857"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.111" release="1.el9_8" epoch="0" arch="s390x" src="dotnet10.0-10.0.111-1.el9_8.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.111-1.el9_8.s390x.rpm</filename>
          <sum type="sha256">27acf9724321d47122e869afe3d4d56864d3c7ccb34cb98ceb29a43c33d2f6f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:55865</id>
    <title>Important: gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update</title>
    <issued date="2026-08-17 00:00:00"/>
    <updated date="2026-08-18 10:42:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387)
  * gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:55865" id="RHSA-2026:55865" type="rhsa" title="RHSA-2026:55865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-19387" id="CVE-2026-19387" type="cve" title="CVE-2026-19387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-19389" id="CVE-2026-19389" type="cve" title="CVE-2026-19389"/>
      <reference href="https://bugzilla.redhat.com/2513015" id="2513015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2513016" id="2513016" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-55865.html" id="ALSA-2026:55865" type="self" title="ALSA-2026:55865"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_8_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_8_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.22.12" release="7.el9_8.4" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-7.el9_8.4.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.12-7.el9_8.4.s390x.rpm</filename>
          <sum type="sha256">1ad9246c6ea61a4b69076d843f4b1fb367984a171663a50f7a331ab0cc48629f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5599</id>
    <title>Moderate: nginx security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 13:22:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5599" id="RHSA-2026:5599" type="rhsa" title="RHSA-2026:5599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1642" id="CVE-2026-1642" type="cve" title="CVE-2026-1642"/>
      <reference href="https://bugzilla.redhat.com/2436738" id="2436738" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-5599.html" id="ALSA-2026:5599" type="self" title="ALSA-2026:5599"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="nginx-mod-devel" version="1.20.1" release="24.el9_7.1.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.1.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.20.1-24.el9_7.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">c5dfc0007e17384e0b75b7bca72ab327dc38a28b93e2f62f3925e72e14d20ca5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5603</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 09:58:23"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.  

Security Fix(es):  

  * openCryptoki: openCryptoki: Privilege Escalation or Data Exposure via Symlink Following (CVE-2026-23893)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5603" id="RHSA-2026:5603" type="rhsa" title="RHSA-2026:5603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23893" id="CVE-2026-23893" type="cve" title="CVE-2026-23893"/>
      <reference href="https://bugzilla.redhat.com/2431909" id="2431909" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-5603.html" id="ALSA-2026:5603" type="self" title="ALSA-2026:5603"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="opencryptoki-devel" version="3.25.0" release="4.el9_7.2" epoch="0" arch="s390x" src="opencryptoki-3.25.0-4.el9_7.2.src.rpm">
          <filename>opencryptoki-devel-3.25.0-4.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">7a4420af7a3a89f2c9c6c194794220f112bc75cc32baee585d4e0dd17acce936</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6004</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-03-31 08:19:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path (CVE-2026-26965)
  * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline (CVE-2026-26955)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6004" id="RHSA-2026:6004" type="rhsa" title="RHSA-2026:6004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26955" id="CVE-2026-26955" type="cve" title="CVE-2026-26955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26965" id="CVE-2026-26965" type="cve" title="CVE-2026-26965"/>
      <reference href="https://bugzilla.redhat.com/2442959" id="2442959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2443132" id="2443132" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6004.html" id="ALSA-2026:6004" type="self" title="ALSA-2026:6004"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="freerdp-devel" version="2.11.7" release="1.el9_7.3" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.3.src.rpm">
          <filename>freerdp-devel-2.11.7-1.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">1b2bd13403668adff4dd40c2cf37443461e6dfde4ca49581eea9659abedd633c</sum>
        </package>
        <package name="libwinpr-devel" version="2.11.7" release="1.el9_7.3" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.3.src.rpm">
          <filename>libwinpr-devel-2.11.7-1.el9_7.3.s390x.rpm</filename>
          <sum type="sha256">7bacd67b75ee0fc5c605b211cd8e4b943d2ca3ca581904a9a45d854300444132</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6153</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-04-02 08:42:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem (CVE-2025-38180)
  * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096)
  * kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144)
  * kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171)
  * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
  * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209)
  * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
  * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6153" id="RHSA-2026:6153" type="rhsa" title="RHSA-2026:6153"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38180" id="CVE-2025-38180" type="cve" title="CVE-2025-38180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40096" id="CVE-2025-40096" type="cve" title="CVE-2025-40096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23144" id="CVE-2026-23144" type="cve" title="CVE-2026-23144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23171" id="CVE-2026-23171" type="cve" title="CVE-2026-23171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23191" id="CVE-2026-23191" type="cve" title="CVE-2026-23191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23193" id="CVE-2026-23193" type="cve" title="CVE-2026-23193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23204" id="CVE-2026-23204" type="cve" title="CVE-2026-23204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23209" id="CVE-2026-23209" type="cve" title="CVE-2026-23209"/>
      <reference href="https://bugzilla.redhat.com/2376376" id="2376376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407333" id="2407333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439872" id="2439872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439886" id="2439886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439887" id="2439887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439900" id="2439900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439931" id="2439931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439947" id="2439947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6153.html" id="ALSA-2026:6153" type="self" title="ALSA-2026:6153"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">66fa92e79c18c21d8259ea816619526a6e8ab70dd0b9062e94ed6fe46979e347</sum>
        </package>
        <package name="libperf" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.45.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">79d2d258ec3c27cf9cec14139f69bf21ec75f3c417ddd4b65275203863ca86ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6285</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 09:05:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6285" id="RHSA-2026:6285" type="rhsa" title="RHSA-2026:6285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6285.html" id="ALSA-2026:6285" type="self" title="ALSA-2026:6285"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3.12-debug" version="3.12.12" release="4.el9_7.2" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.2.src.rpm">
          <filename>python3.12-debug-3.12.12-4.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">2c7b196299d8d50232c7e387fb91133c76750f6101aa7b8631efadc0cea2d429</sum>
        </package>
        <package name="python3.12-test" version="3.12.12" release="4.el9_7.2" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.2.src.rpm">
          <filename>python3.12-test-3.12.12-4.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">9a25a4b97d357daa32e171f9617cc4d4fcf931eeec5a5f30acd0ef345fad8deb</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="4.el9_7.2" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el9_7.2.src.rpm">
          <filename>python3.12-idle-3.12.12-4.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">ad5862ac702f1c8b20c4d5567658124c0525cec8cca9383eb4e72e6679f68c0d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6286</id>
    <title>Important: python3.11 security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 09:15:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6286" id="RHSA-2026:6286" type="rhsa" title="RHSA-2026:6286"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6286.html" id="ALSA-2026:6286" type="self" title="ALSA-2026:6286"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3.11-debug" version="3.11.13" release="5.2.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.2.el9_7.src.rpm">
          <filename>python3.11-debug-3.11.13-5.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">4a7e05992079c005c44283aa71b6208e58b56c63070e972a2c42340cf1c579fc</sum>
        </package>
        <package name="python3.11-test" version="3.11.13" release="5.2.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.2.el9_7.src.rpm">
          <filename>python3.11-test-3.11.13-5.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">8509f1ff424797a12885817b9e94ed11ebfb21edf8cb506c46b037bc90814057</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="5.2.el9_7" epoch="0" arch="s390x" src="python3.11-3.11.13-5.2.el9_7.src.rpm">
          <filename>python3.11-idle-3.11.13-5.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">8533cb0ad638a46a7b6a9bdc4ceadef50d9aeedd830223e09195e49c872e5ec4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6300</id>
    <title>Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-03 17:13:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920)
  * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082)
  * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085)
  * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921)
  * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6300" id="RHSA-2026:6300" type="rhsa" title="RHSA-2026:6300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2920" id="CVE-2026-2920" type="cve" title="CVE-2026-2920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2921" id="CVE-2026-2921" type="cve" title="CVE-2026-2921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2922" id="CVE-2026-2922" type="cve" title="CVE-2026-2922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2923" id="CVE-2026-2923" type="cve" title="CVE-2026-2923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3082" id="CVE-2026-3082" type="cve" title="CVE-2026-3082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3083" id="CVE-2026-3083" type="cve" title="CVE-2026-3083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3085" id="CVE-2026-3085" type="cve" title="CVE-2026-3085"/>
      <reference href="https://bugzilla.redhat.com/2447490" id="2447490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447492" id="2447492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447495" id="2447495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447496" id="2447496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447498" id="2447498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447500" id="2447500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447503" id="2447503" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6300.html" id="ALSA-2026:6300" type="self" title="ALSA-2026:6300"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.22.12" release="5.el9_7" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.22.12-5.el9_7.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.22.12-5.el9_7.s390x.rpm</filename>
          <sum type="sha256">4010b32349e3648d7e56b3fe21ad9e6c0688171ed115df4ff514413173f6c523</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6340</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-01 00:00:00"/>
    <updated date="2026-04-02 09:09:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852)
  * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732)
  * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676)
  * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491)
  * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948)
  * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684)
  * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681)
  * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683)
  * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679)
  * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675)
  * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages (CVE-2026-31806)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6340" id="RHSA-2026:6340" type="rhsa" title="RHSA-2026:6340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22852" id="CVE-2026-22852" type="cve" title="CVE-2026-22852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22854" id="CVE-2026-22854" type="cve" title="CVE-2026-22854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22856" id="CVE-2026-22856" type="cve" title="CVE-2026-22856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23732" id="CVE-2026-23732" type="cve" title="CVE-2026-23732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23948" id="CVE-2026-23948" type="cve" title="CVE-2026-23948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24491" id="CVE-2026-24491" type="cve" title="CVE-2026-24491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24675" id="CVE-2026-24675" type="cve" title="CVE-2026-24675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24676" id="CVE-2026-24676" type="cve" title="CVE-2026-24676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24679" id="CVE-2026-24679" type="cve" title="CVE-2026-24679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24681" id="CVE-2026-24681" type="cve" title="CVE-2026-24681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24683" id="CVE-2026-24683" type="cve" title="CVE-2026-24683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24684" id="CVE-2026-24684" type="cve" title="CVE-2026-24684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31806" id="CVE-2026-31806" type="cve" title="CVE-2026-31806"/>
      <reference href="https://bugzilla.redhat.com/2429650" id="2429650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429652" id="2429652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429654" id="2429654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430881" id="2430881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438201" id="2438201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438202" id="2438202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438207" id="2438207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438208" id="2438208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438210" id="2438210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438216" id="2438216" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438217" id="2438217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438221" id="2438221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447376" id="2447376" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6340.html" id="ALSA-2026:6340" type="self" title="ALSA-2026:6340"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libwinpr-devel" version="2.11.7" release="1.el9_7.5" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.5.src.rpm">
          <filename>libwinpr-devel-2.11.7-1.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">1516763456f0ecc37bb0232ebaba45ff4892d0a3cf50be0c4565b23d893e2ffb</sum>
        </package>
        <package name="freerdp-devel" version="2.11.7" release="1.el9_7.5" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.5.src.rpm">
          <filename>freerdp-devel-2.11.7-1.el9_7.5.s390x.rpm</filename>
          <sum type="sha256">9cb155f4923b017f748f3605c499c21554371246619952607198842aeaa93e35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6570</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-04-06 00:00:00"/>
    <updated date="2026-04-15 08:21:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109)
  * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)
  * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210)
  * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6570" id="RHSA-2026:6570" type="rhsa" title="RHSA-2026:6570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38109" id="CVE-2025-38109" type="cve" title="CVE-2025-38109"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23111" id="CVE-2026-23111" type="cve" title="CVE-2026-23111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23210" id="CVE-2026-23210" type="cve" title="CVE-2026-23210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23231" id="CVE-2026-23231" type="cve" title="CVE-2026-23231"/>
      <reference href="https://bugzilla.redhat.com/2376101" id="2376101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439687" id="2439687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439895" id="2439895" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444376" id="2444376" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6570.html" id="ALSA-2026:6570" type="self" title="ALSA-2026:6570"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">bb7d0edc75e2686721c19f23d647ecc027c3769ac1d0ed7181a8a18ad26fb370</sum>
        </package>
        <package name="libperf" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.47.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">c36b7be1e62782de0a6bcafc679394d8f233a0ab482687165e296c6ec937f099</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6628</id>
    <title>Important: fontforge security update</title>
    <issued date="2026-04-06 00:00:00"/>
    <updated date="2026-04-08 23:11:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fontforge security update</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.   

Security Fix(es):  

  * fontforge: FontForge: Remote Code Execution via malicious SFD file parsing (CVE-2025-15270)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6628" id="RHSA-2026:6628" type="rhsa" title="RHSA-2026:6628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15270" id="CVE-2025-15270" type="cve" title="CVE-2025-15270"/>
      <reference href="https://bugzilla.redhat.com/2426434" id="2426434" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6628.html" id="ALSA-2026:6628" type="self" title="ALSA-2026:6628"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="fontforge" version="20201107" release="8.el9_7" epoch="0" arch="s390x" src="fontforge-20201107-8.el9_7.src.rpm">
          <filename>fontforge-20201107-8.el9_7.s390x.rpm</filename>
          <sum type="sha256">338efe0bdcaf6883073acdd91e00a7be18c08191ed9e54326de1a996a552fafd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6766</id>
    <title>Important: python3.9 security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 19:41:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6766" id="RHSA-2026:6766" type="rhsa" title="RHSA-2026:6766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6766.html" id="ALSA-2026:6766" type="self" title="ALSA-2026:6766"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="python3-debug" version="3.9.25" release="3.el9_7.2" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.2.src.rpm">
          <filename>python3-debug-3.9.25-3.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">109988550aa2191e0097896f51d526d90efbe014c5677703687066684d87e894</sum>
        </package>
        <package name="python3-test" version="3.9.25" release="3.el9_7.2" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.2.src.rpm">
          <filename>python3-test-3.9.25-3.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">1af8f582740cce6604cae2e204673db540f4638ec4cd4ea7db756cca5233307a</sum>
        </package>
        <package name="python3-idle" version="3.9.25" release="3.el9_7.2" epoch="0" arch="s390x" src="python3.9-3.9.25-3.el9_7.2.src.rpm">
          <filename>python3-idle-3.9.25-3.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">90b2b98f1caac4398a4664a5caaea1bf0a94ff4b4fb179663c382b46ae95f757</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7002</id>
    <title>Important: nginx security update</title>
    <issued date="2026-04-08 00:00:00"/>
    <updated date="2026-04-15 08:21:23"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647)
  * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654)
  * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784)
  * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7002" id="RHSA-2026:7002" type="rhsa" title="RHSA-2026:7002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27651" id="CVE-2026-27651" type="cve" title="CVE-2026-27651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27654" id="CVE-2026-27654" type="cve" title="CVE-2026-27654"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27784" id="CVE-2026-27784" type="cve" title="CVE-2026-27784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32647" id="CVE-2026-32647" type="cve" title="CVE-2026-32647"/>
      <reference href="https://bugzilla.redhat.com/2449598" id="2449598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450776" id="2450776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450785" id="2450785" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450791" id="2450791" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7002.html" id="ALSA-2026:7002" type="self" title="ALSA-2026:7002"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="nginx-mod-devel" version="1.20.1" release="24.el9_7.2.alma.1" epoch="2" arch="s390x" src="nginx-1.20.1-24.el9_7.2.alma.1.src.rpm">
          <filename>nginx-mod-devel-1.20.1-24.el9_7.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">025f8b5c805b4e3da98aea690280a5ff9b0c2f89aa48712a9e892d9a236d331e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7668</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 08:03:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.  

Security Fix(es):  

  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7668" id="RHSA-2026:7668" type="rhsa" title="RHSA-2026:7668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27135" id="CVE-2026-27135" type="cve" title="CVE-2026-27135"/>
      <reference href="https://bugzilla.redhat.com/2448754" id="2448754" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7668.html" id="ALSA-2026:7668" type="self" title="ALSA-2026:7668"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="nghttp2" version="1.43.0" release="6.el9_7.1" epoch="0" arch="s390x" src="nghttp2-1.43.0-6.el9_7.1.src.rpm">
          <filename>nghttp2-1.43.0-6.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">139feab65922c4563d74a3dbe4aadb02554e379b4e24065d24b8d5bf7ccd5734</sum>
        </package>
        <package name="libnghttp2-devel" version="1.43.0" release="6.el9_7.1" epoch="0" arch="s390x" src="nghttp2-1.43.0-6.el9_7.1.src.rpm">
          <filename>libnghttp2-devel-1.43.0-6.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">adcb607821d50668699925d5fe9e0424c2842a002e5338c0f1ba1f353abe0933</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7915</id>
    <title>Important: bind9.18 security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 08:47:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.18 security update</summary>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  

Security Fix(es):  

  * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7915" id="RHSA-2026:7915" type="rhsa" title="RHSA-2026:7915"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1519" id="CVE-2026-1519" type="cve" title="CVE-2026-1519"/>
      <reference href="https://bugzilla.redhat.com/2451305" id="2451305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-7915.html" id="ALSA-2026:7915" type="self" title="ALSA-2026:7915"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="bind9.18-devel" version="9.18.29" release="5.el9_7.4" epoch="32" arch="s390x" src="bind9.18-9.18.29-5.el9_7.4.src.rpm">
          <filename>bind9.18-devel-9.18.29-5.el9_7.4.s390x.rpm</filename>
          <sum type="sha256">691a49d3a0500ffd0de9e111261494ae5bb4ef1205b8549e8dddd541a8fe4be2</sum>
        </package>
        <package name="bind9.18-doc" version="9.18.29" release="5.el9_7.4" epoch="32" arch="noarch" src="bind9.18-9.18.29-5.el9_7.4.src.rpm">
          <filename>bind9.18-doc-9.18.29-5.el9_7.4.noarch.rpm</filename>
          <sum type="sha256">9e325df1d0aa41c0f14eb50dcf97f2fe6e998789cba551763a254703171afd2c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8075</id>
    <title>Important: bind security update</title>
    <issued date="2026-04-14 00:00:00"/>
    <updated date="2026-04-15 08:24:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8075" id="RHSA-2026:8075" type="rhsa" title="RHSA-2026:8075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1519" id="CVE-2026-1519" type="cve" title="CVE-2026-1519"/>
      <reference href="https://bugzilla.redhat.com/2451305" id="2451305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8075.html" id="ALSA-2026:8075" type="self" title="ALSA-2026:8075"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="bind-doc" version="9.16.23" release="34.el9_7.2" epoch="32" arch="noarch" src="bind-9.16.23-34.el9_7.2.src.rpm">
          <filename>bind-doc-9.16.23-34.el9_7.2.noarch.rpm</filename>
          <sum type="sha256">6230f544cc78b94f7f849f02776a9ee03d0d629a65ae19a135fca406798a0a1d</sum>
        </package>
        <package name="bind-devel" version="9.16.23" release="34.el9_7.2" epoch="32" arch="s390x" src="bind-9.16.23-34.el9_7.2.src.rpm">
          <filename>bind-devel-9.16.23-34.el9_7.2.s390x.rpm</filename>
          <sum type="sha256">d0a7b161d73b79e5a975392b3231b32cd81fcf3038cc95f9e0f8ea96132cd782</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8457</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-17 12:08:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data (CVE-2026-33984)
  * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages (CVE-2026-33983)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8457" id="RHSA-2026:8457" type="rhsa" title="RHSA-2026:8457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33983" id="CVE-2026-33983" type="cve" title="CVE-2026-33983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33984" id="CVE-2026-33984" type="cve" title="CVE-2026-33984"/>
      <reference href="https://bugzilla.redhat.com/2453219" id="2453219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453220" id="2453220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8457.html" id="ALSA-2026:8457" type="self" title="ALSA-2026:8457"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libwinpr-devel" version="2.11.7" release="1.el9_7.6" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.6.src.rpm">
          <filename>libwinpr-devel-2.11.7-1.el9_7.6.s390x.rpm</filename>
          <sum type="sha256">4fb55e15ff17e6e1889b71b09f7fbd80008fa6b1a3bb74bb3898febd3fd4d1cd</sum>
        </package>
        <package name="freerdp-devel" version="2.11.7" release="1.el9_7.6" epoch="2" arch="s390x" src="freerdp-2.11.7-1.el9_7.6.src.rpm">
          <filename>freerdp-devel-2.11.7-1.el9_7.6.s390x.rpm</filename>
          <sum type="sha256">5a8db40b30e86512c2afc3bab39598d9d7829e87de8830bd254088165e20ced6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8469</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-17 11:12:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.126 and .NET Runtime 8.0.26.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8469" id="RHSA-2026:8469" type="rhsa" title="RHSA-2026:8469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8469.html" id="ALSA-2026:8469" type="self" title="ALSA-2026:8469"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.126" release="1.el9_7" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el9_7.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el9_7.s390x.rpm</filename>
          <sum type="sha256">b6dc3e8bc87c57d7758dd1c5f259a144d025eacb099c4bf2f5fcb05597174f2a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8859</id>
    <title>Important: giflib security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-30 07:34:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>giflib security update</summary>
    <description>giflib is a library for reading and writing gif images.  

Security Fix(es):  

  * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8859" id="RHSA-2026:8859" type="rhsa" title="RHSA-2026:8859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23868" id="CVE-2026-23868" type="cve" title="CVE-2026-23868"/>
      <reference href="https://bugzilla.redhat.com/2446207" id="2446207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8859.html" id="ALSA-2026:8859" type="self" title="ALSA-2026:8859"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="giflib-devel" version="5.2.1" release="9.el9_7.1" epoch="0" arch="s390x" src="giflib-5.2.1-9.el9_7.1.src.rpm">
          <filename>giflib-devel-5.2.1-9.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">4afae997e8e4585c820a4e9a90ab104ad98389a847566d303cf6cc966b5fd22a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8888</id>
    <title>Important: openexr security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-20 08:30:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openexr security update</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  

Security Fix(es):  

  * openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing (CVE-2026-27622)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8888" id="RHSA-2026:8888" type="rhsa" title="RHSA-2026:8888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27622" id="CVE-2026-27622" type="cve" title="CVE-2026-27622"/>
      <reference href="https://bugzilla.redhat.com/2444251" id="2444251" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8888.html" id="ALSA-2026:8888" type="self" title="ALSA-2026:8888"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="openexr-devel" version="3.1.1" release="3.el9_7.1" epoch="0" arch="s390x" src="openexr-3.1.1-3.el9_7.1.src.rpm">
          <filename>openexr-devel-3.1.1-3.el9_7.1.s390x.rpm</filename>
          <sum type="sha256">7f5aa48d4f8de305848e8c3b2d04cdfb3bf09d86c347451514893b58897e8738</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8921</id>
    <title>Important: kernel security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-22 10:40:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
  * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8921" id="RHSA-2026:8921" type="rhsa" title="RHSA-2026:8921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39766" id="CVE-2025-39766" type="cve" title="CVE-2025-39766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68741" id="CVE-2025-68741" type="cve" title="CVE-2025-68741"/>
      <reference href="https://bugzilla.redhat.com/2394648" id="2394648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425046" id="2425046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8921.html" id="ALSA-2026:8921" type="self" title="ALSA-2026:8921"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">400c509a324eb1396643d8e411598f77ed0e4e9117d15182fd525673284bc496</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.49.1.el9_7.s390x.rpm</filename>
          <sum type="sha256">7158059f6f872f697c2d10e8237459d97c3424296e4e55cb017811c802b6855b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9686</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-28 13:17:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9686" id="RHSA-2026:9686" type="rhsa" title="RHSA-2026:9686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-9686.html" id="ALSA-2026:9686" type="self" title="ALSA-2026:9686"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">32903155ff3fe58b4d629f940bc6eb2c200c30c51f559294823dcdbb07589e1c</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">3b0f3d18ba912390b97a1be4b8c836c3373cca0eb15cf2c784a0b6831efeceef</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">3d14b4d1c9ca24bc1b2dfae973f35664081d7cf837e6669a26dc5e2dbdb0bf14</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">4739cf6a5b08c89f0c16edda2090ccaf9493b5791683353c65d64ae30d514f78</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">57842d586de3b166288f8fd992ff73d1a750c953d85b567f9812352123e21d9d</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d57fcc2b479b4a0a35f5014b2ead49932075b0be492621d548c5d425b4d6392e</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.19.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-2.el9.alma.1.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.19.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">faefc7293807d48323c8a62a8eb84b1ff923bc3bb404d6855ba8f95e04212477</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9689</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-30 07:19:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


Bug Fix(es):  

  * When copying files, OpenJDK 21 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 21 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169617, AlmaLinux-169951, AlmaLinux-169952, AlmaLinux-169942, AlmaLinux-169953, AlmaLinux-169945)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9689" id="RHSA-2026:9689" type="rhsa" title="RHSA-2026:9689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-9689.html" id="ALSA-2026:9689" type="self" title="ALSA-2026:9689"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">59a2bc4ea15ab7b791864363cc89891d6706795828ac6e8aae4b8955490791c2</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">62555b876105976acfcadf352623ff558680322d994fb6cb82177d3cc0be7ad3</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">6832de40098fc8b25e96af1d4639943fa6a70e1b5d446cda73678d2591963fdc</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">8957e11e4cdf23b477d2454dc968269b092d9844e1774d289362969e43a1a4fa</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">931f3437187de5b26f08b8112607ca1e7861a3cd7adc49fac95fbf0e917b357a</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">b057d6e62a540bd488ebbc81b748a918382e6289e68f1f812806e99fe02c05d0</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.11.0.10" release="2.el9.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-2.el9.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.11.0.10-2.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d9cbd6fd0514cd407a97f64599372fbc29e7970a278af6787c18a50f912bcf7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9693</id>
    <title>Important: java-25-openjdk security update</title>
    <issued date="2026-04-22 00:00:00"/>
    <updated date="2026-04-24 09:58:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-25-openjdk security update</summary>
    <description>The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improved Arena allocations (CVE-2026-22008)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


This release also updates a number of third-party libraries included in the JDK. The libraries themselves are affected by the following CVEs, but this is not a statement that the JDK itself is affected:  

  * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)
  * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)
  * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)


Bug Fix(es):  

  * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 25 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169939, AlmaLinux-169937)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9693" id="RHSA-2026:9693" type="rhsa" title="RHSA-2026:9693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22008" id="CVE-2026-22008" type="cve" title="CVE-2026-22008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26740" id="CVE-2026-26740" type="cve" title="CVE-2026-26740"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33636" id="CVE-2026-33636" type="cve" title="CVE-2026-33636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-9693.html" id="ALSA-2026:9693" type="self" title="ALSA-2026:9693"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="java-25-openjdk-crypto-adapter-slowdebug" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">13ad3ced1e4203586f22dae45c37418bc80a84ff3014d2f93b2af61806b86278</sum>
        </package>
        <package name="java-25-openjdk-headless-slowdebug" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-headless-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">1a57008c783551876fc988604c26434a5c26d229136b92fe2f8365a6408e341c</sum>
        </package>
        <package name="java-25-openjdk-src-slowdebug" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-src-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">44b9688af8371e2786a157d50d44b2f3b4c626452b557718ae767a9ec6f6a3a6</sum>
        </package>
        <package name="java-25-openjdk-slowdebug" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">561a79bc47229c42ba568cc1dd99d866307b75a58a6dceca833649ff5de28463</sum>
        </package>
        <package name="java-25-openjdk-demo-slowdebug" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-demo-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">5a04640a87c91f73294ca2a472915796e5d75058308223ba26107ff9bf61a1fb</sum>
        </package>
        <package name="java-25-openjdk-devel-slowdebug" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-devel-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c74f3e8df01ee9b10c045ad370ca92552d2ca5311a79aa69b6aec9d5cee270c8</sum>
        </package>
        <package name="java-25-openjdk-static-libs-slowdebug" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-static-libs-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">d3b907be520756f02bb53979e93fad866fe80c4fbbdd9761ffe19721cf1a1d71</sum>
        </package>
        <package name="java-25-openjdk-jmods-slowdebug" version="25.0.3.0.9" release="1.el9.alma.1" epoch="1" arch="s390x" src="java-25-openjdk-25.0.3.0.9-1.el9.alma.1.src.rpm">
          <filename>java-25-openjdk-jmods-slowdebug-25.0.3.0.9-1.el9.alma.1.s390x.rpm</filename>
          <sum type="sha256">dcfbd561392d1c0bcf0c79c5cd4ca387e15e29093448020495eed4dbd26d9c22</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A002</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 19:09:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2460538" id="show_bug.cgi?id=2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A002.html" id="ALSA-2026:A002" type="self" title="ALSA-2026:A002"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">85c1d103e5ea9003715ac012de05dbafdde187c4b46959562e5821ebbf5f443f</sum>
        </package>
        <package name="libperf" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.49.2.el9_7.s390x.rpm</filename>
          <sum type="sha256">939abfc10ba7c51c13e1d2cd850def00ae3f6e1f35756ff2f565e50049db2b9e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A005</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-08 00:00:00"/>
    <updated date="2026-05-08 14:26:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2467771" id="show_bug.cgi?id=2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A005.html" id="ALSA-2026:A005" type="self" title="ALSA-2026:A005"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="libperf" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.54.3.el9_7.s390x.rpm</filename>
          <sum type="sha256">9c62b029ee34b7f30e01a04386886199ca96cb792e0c8131d05bfa90ab028456</sum>
        </package>
        <package name="kernel-cross-headers" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.54.3.el9_7.s390x.rpm</filename>
          <sum type="sha256">ad0f2bbb91ea827df24e2099251e5acbb7cf5435d67950c557ec35cf6664ab26</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A009</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-16 00:00:00"/>
    <updated date="2026-05-16 13:09:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):
  * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300)
  * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46300" id="CVE-2026-46300" type="cve" title="CVE-2026-46300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46333" id="CVE-2026-46333" type="cve" title="CVE-2026-46333"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477015" id="show_bug.cgi?id=2477015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477802" id="show_bug.cgi?id=2477802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A009.html" id="ALSA-2026:A009" type="self" title="ALSA-2026:A009"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-s390x-crb-rpms__9_7_default">
        <name>almalinux-9-for-s390x-crb-rpms__9_7_default</name>
        <package name="kernel-cross-headers" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-cross-headers-5.14.0-611.54.6.el9_7.s390x.rpm</filename>
          <sum type="sha256">75f73be09441e0dfa0a332bb4e610ca2aee6e28f9d52ce944dc7b0d8c014a992</sum>
        </package>
        <package name="libperf" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="s390x" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>libperf-5.14.0-611.54.6.el9_7.s390x.rpm</filename>
          <sum type="sha256">daf9b8808beef952d43779f3a29b31a43125adf581ac2e7478cff6972dd04488</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>