<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20095</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:55:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  * kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)
  * kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)
  * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  * kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)
  * kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)
  * kernel: io_uring/sqpoll: zero sqd-&gt;thread on tctx errors (CVE-2025-21633)
  * kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)
  * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  * kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)
  * kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)
  * kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)
  * kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  * kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)
  * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  * kernel: pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0 (CVE-2025-21702)
  * kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)
  * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  * kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)
  * kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)
  * kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)
  * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  * kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)
  * kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)
  * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  * kernel: HID: multitouch: Add NULL check in mt_input_configured (CVE-2024-58020)
  * kernel: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition (CVE-2024-57984)
  * kernel: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (CVE-2025-21761)
  * kernel: sched_ext: Fix incorrect autogroup migration detection (CVE-2025-21771)
  * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981)
  * kernel: memcg: fix soft lockup in the OOM process (CVE-2024-57977)
  * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790)
  * kernel: usbnet: ipheth: fix DPE OoB read (CVE-2025-21741)
  * kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CVE-2025-21785)
  * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765)
  * kernel: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (CVE-2024-58006)
  * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012)
  * kernel: wifi: brcmfmac: Check the return value of of_property_read_string_index() (CVE-2025-21750)
  * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072)
  * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)
  * kernel: wifi: mac80211: prohibit deactivating all links (CVE-2024-58061)
  * kernel: idpf: convert workqueues to unbound (CVE-2024-58057)
  * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828)
  * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826)
  * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077)
  * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075)
  * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837)
  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: net/sched: cls_api: fix error handling causing NULL dereference (CVE-2025-21857)
  * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851)
  * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855)
  * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844)
  * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853)
  * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847)
  * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864)
  * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088)
  * kernel: acct: perform last write from workqueue (CVE-2025-21846)
  * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861)
  * kernel: io_uring: prevent opcode speculation (CVE-2025-21863)
  * kernel: fbdev: hyperv_fb: Allow graceful removal of framebuffer (CVE-2025-21976)
  * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056)
  * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749)
  * microcode_ctl: From CVEorg collector (CVE-2024-28956)
  * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994)
  * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116)
  * kernel: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (CVE-2025-38412)
  * kernel: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (CVE-2025-38369)
  * kernel: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (CVE-2025-38468)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20095" id="RHSA-2025:20095" type="rhsa" title="RHSA-2025:20095"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28956" id="CVE-2024-28956" type="cve" title="CVE-2024-28956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36350" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36357" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49570" id="CVE-2024-49570" type="cve" title="CVE-2024-49570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52332" id="CVE-2024-52332" type="cve" title="CVE-2024-52332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53147" id="CVE-2024-53147" type="cve" title="CVE-2024-53147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53216" id="CVE-2024-53216" type="cve" title="CVE-2024-53216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53222" id="CVE-2024-53222" type="cve" title="CVE-2024-53222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53241" id="CVE-2024-53241" type="cve" title="CVE-2024-53241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54456" id="CVE-2024-54456" type="cve" title="CVE-2024-54456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56662" id="CVE-2024-56662" type="cve" title="CVE-2024-56662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56675" id="CVE-2024-56675" type="cve" title="CVE-2024-56675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56690" id="CVE-2024-56690" type="cve" title="CVE-2024-56690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57901" id="CVE-2024-57901" type="cve" title="CVE-2024-57901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57902" id="CVE-2024-57902" type="cve" title="CVE-2024-57902"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57941" id="CVE-2024-57941" type="cve" title="CVE-2024-57941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57942" id="CVE-2024-57942" type="cve" title="CVE-2024-57942"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57977" id="CVE-2024-57977" type="cve" title="CVE-2024-57977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57981" id="CVE-2024-57981" type="cve" title="CVE-2024-57981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57984" id="CVE-2024-57984" type="cve" title="CVE-2024-57984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57986" id="CVE-2024-57986" type="cve" title="CVE-2024-57986"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57987" id="CVE-2024-57987" type="cve" title="CVE-2024-57987"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57988" id="CVE-2024-57988" type="cve" title="CVE-2024-57988"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57989" id="CVE-2024-57989" type="cve" title="CVE-2024-57989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57995" id="CVE-2024-57995" type="cve" title="CVE-2024-57995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58004" id="CVE-2024-58004" type="cve" title="CVE-2024-58004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58005" id="CVE-2024-58005" type="cve" title="CVE-2024-58005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58006" id="CVE-2024-58006" type="cve" title="CVE-2024-58006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58012" id="CVE-2024-58012" type="cve" title="CVE-2024-58012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58013" id="CVE-2024-58013" type="cve" title="CVE-2024-58013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58014" id="CVE-2024-58014" type="cve" title="CVE-2024-58014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58015" id="CVE-2024-58015" type="cve" title="CVE-2024-58015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58020" id="CVE-2024-58020" type="cve" title="CVE-2024-58020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58057" id="CVE-2024-58057" type="cve" title="CVE-2024-58057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58061" id="CVE-2024-58061" type="cve" title="CVE-2024-58061"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58069" id="CVE-2024-58069" type="cve" title="CVE-2024-58069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58072" id="CVE-2024-58072" type="cve" title="CVE-2024-58072"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58075" id="CVE-2024-58075" type="cve" title="CVE-2024-58075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58077" id="CVE-2024-58077" type="cve" title="CVE-2024-58077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58088" id="CVE-2024-58088" type="cve" title="CVE-2024-58088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21633" id="CVE-2025-21633" type="cve" title="CVE-2025-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21647" id="CVE-2025-21647" type="cve" title="CVE-2025-21647"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21652" id="CVE-2025-21652" type="cve" title="CVE-2025-21652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21655" id="CVE-2025-21655" type="cve" title="CVE-2025-21655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21671" id="CVE-2025-21671" type="cve" title="CVE-2025-21671"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21680" id="CVE-2025-21680" type="cve" title="CVE-2025-21680"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21691" id="CVE-2025-21691" type="cve" title="CVE-2025-21691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21693" id="CVE-2025-21693" type="cve" title="CVE-2025-21693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21696" id="CVE-2025-21696" type="cve" title="CVE-2025-21696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21702" id="CVE-2025-21702" type="cve" title="CVE-2025-21702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21726" id="CVE-2025-21726" type="cve" title="CVE-2025-21726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21732" id="CVE-2025-21732" type="cve" title="CVE-2025-21732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21738" id="CVE-2025-21738" type="cve" title="CVE-2025-21738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21741" id="CVE-2025-21741" type="cve" title="CVE-2025-21741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21742" id="CVE-2025-21742" type="cve" title="CVE-2025-21742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21743" id="CVE-2025-21743" type="cve" title="CVE-2025-21743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21750" id="CVE-2025-21750" type="cve" title="CVE-2025-21750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21761" id="CVE-2025-21761" type="cve" title="CVE-2025-21761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21765" id="CVE-2025-21765" type="cve" title="CVE-2025-21765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21771" id="CVE-2025-21771" type="cve" title="CVE-2025-21771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21777" id="CVE-2025-21777" type="cve" title="CVE-2025-21777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21785" id="CVE-2025-21785" type="cve" title="CVE-2025-21785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21786" id="CVE-2025-21786" type="cve" title="CVE-2025-21786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21790" id="CVE-2025-21790" type="cve" title="CVE-2025-21790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21791" id="CVE-2025-21791" type="cve" title="CVE-2025-21791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21795" id="CVE-2025-21795" type="cve" title="CVE-2025-21795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21796" id="CVE-2025-21796" type="cve" title="CVE-2025-21796"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21826" id="CVE-2025-21826" type="cve" title="CVE-2025-21826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21828" id="CVE-2025-21828" type="cve" title="CVE-2025-21828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21837" id="CVE-2025-21837" type="cve" title="CVE-2025-21837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21844" id="CVE-2025-21844" type="cve" title="CVE-2025-21844"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21846" id="CVE-2025-21846" type="cve" title="CVE-2025-21846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21847" id="CVE-2025-21847" type="cve" title="CVE-2025-21847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21851" id="CVE-2025-21851" type="cve" title="CVE-2025-21851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21853" id="CVE-2025-21853" type="cve" title="CVE-2025-21853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21855" id="CVE-2025-21855" type="cve" title="CVE-2025-21855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21857" id="CVE-2025-21857" type="cve" title="CVE-2025-21857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21861" id="CVE-2025-21861" type="cve" title="CVE-2025-21861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21863" id="CVE-2025-21863" type="cve" title="CVE-2025-21863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21864" id="CVE-2025-21864" type="cve" title="CVE-2025-21864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21976" id="CVE-2025-21976" type="cve" title="CVE-2025-21976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22056" id="CVE-2025-22056" type="cve" title="CVE-2025-22056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37749" id="CVE-2025-37749" type="cve" title="CVE-2025-37749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37994" id="CVE-2025-37994" type="cve" title="CVE-2025-37994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38116" id="CVE-2025-38116" type="cve" title="CVE-2025-38116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38369" id="CVE-2025-38369" type="cve" title="CVE-2025-38369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38412" id="CVE-2025-38412" type="cve" title="CVE-2025-38412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38468" id="CVE-2025-38468" type="cve" title="CVE-2025-38468"/>
      <reference href="https://bugzilla.redhat.com/2331326" id="2331326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2333985" id="2333985" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334373" id="2334373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334415" id="2334415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334547" id="2334547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334548" id="2334548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334676" id="2334676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337121" id="2337121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338185" id="2338185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338211" id="2338211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338813" id="2338813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338821" id="2338821" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338828" id="2338828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338998" id="2338998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339130" id="2339130" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339141" id="2339141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343172" id="2343172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343186" id="2343186" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344684" id="2344684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344687" id="2344687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345240" id="2345240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346272" id="2346272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348522" id="2348522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348523" id="2348523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348541" id="2348541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348543" id="2348543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348547" id="2348547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348550" id="2348550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348556" id="2348556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348561" id="2348561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348567" id="2348567" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348572" id="2348572" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348574" id="2348574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348577" id="2348577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348581" id="2348581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348584" id="2348584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348587" id="2348587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348590" id="2348590" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348592" id="2348592" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348593" id="2348593" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348595" id="2348595" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348597" id="2348597" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348600" id="2348600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348601" id="2348601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348602" id="2348602" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348603" id="2348603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348612" id="2348612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348617" id="2348617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348620" id="2348620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348621" id="2348621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348625" id="2348625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348629" id="2348629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348630" id="2348630" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348645" id="2348645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348647" id="2348647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348650" id="2348650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348656" id="2348656" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350363" id="2350363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350364" id="2350364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350373" id="2350373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350375" id="2350375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350386" id="2350386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350392" id="2350392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350396" id="2350396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350397" id="2350397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350589" id="2350589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351605" id="2351605" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351606" id="2351606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351608" id="2351608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351612" id="2351612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351613" id="2351613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351616" id="2351616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351618" id="2351618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351620" id="2351620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351624" id="2351624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351625" id="2351625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351629" id="2351629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356664" id="2356664" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360215" id="2360215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363332" id="2363332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366125" id="2366125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369184" id="2369184" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376076" id="2376076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383398" id="2383398" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383432" id="2383432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383913" id="2383913" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20095.html" id="ALSA-2025:20095" type="self" title="ALSA-2025:20095"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="kernel-64k-debug-devel" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">04ea3b2ccd292b14086c210fe01a6c39a9f40db4b5cc64e7b7117f3fa6fcf58b</sum>
        </package>
        <package name="kernel-headers" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-headers-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">0590bd0345bbc747b3af95ea0c966f21674d67c694b3d83cb2d7a0216a9b0b7b</sum>
        </package>
        <package name="rv" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>rv-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">29503ac03b1acabbbf42fddc041016a9373d1f6ba7a820cde538f4cf3cfc92f7</sum>
        </package>
        <package name="kernel-64k-devel-matched" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-matched-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">51bc5c3d7334684e0c4af2b0d74d1a1415feb20188d04139f06b887b1cd40990</sum>
        </package>
        <package name="python3-perf" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>python3-perf-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">5f9fcafd16480b2f057e59631c0da522c9b5c3e128955dccf8c13f571b35ffb8</sum>
        </package>
        <package name="kernel-64k-devel" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">678005043d54637566562c115c9c46c355c8fd182c6fe8c66cc1d45cd6c6bdba</sum>
        </package>
        <package name="kernel-doc" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-doc-6.12.0-124.8.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">6a5c09baff05db47cd493d7e4a44cb9206213caeae25e97eeee0d4b9bffc81a6</sum>
        </package>
        <package name="rtla" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>rtla-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">96f7702ac22899e23dc8122f77a2a1e933be245b87ed663d61eebd6b97ad25e7</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-matched-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">a00dfddfcd68e846c7005ff6ce6634771fe8a0eb208e82b526ae924e1c7b068e</sum>
        </package>
        <package name="perf" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>perf-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">bf851fbbcf5775857b6180c0c259c14dd52044ad219d41ff7f7fcc45c2af35d7</sum>
        </package>
        <package name="kernel-64k-debug-devel-matched" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-matched-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c82344f97314315521964790843e25fc7e638237e8911f3885872a88e913d507</sum>
        </package>
        <package name="kernel-devel" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-devel-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">d4f56018a850084b22a3c8eb2a2d12ffdecf702232d40709b94ab8b44d33e63a</sum>
        </package>
        <package name="kernel-devel-matched" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-devel-matched-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">dd47f483290553169adab67e513b0497384c81f64573d902c28bb4e5861e1512</sum>
        </package>
        <package name="kernel-debug-devel" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-6.12.0-124.8.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">f605b661813403c0fe8362ba6a92cf84b722dd99b423ef048bed3fc2faa73d75</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20126</id>
    <title>Moderate: openssh security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:51:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding (CVE-2025-32728)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20126" id="RHSA-2025:20126" type="rhsa" title="RHSA-2025:20126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32728" id="CVE-2025-32728" type="cve" title="CVE-2025-32728"/>
      <reference href="https://bugzilla.redhat.com/2358767" id="2358767" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20126.html" id="ALSA-2025:20126" type="self" title="ALSA-2025:20126"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="openssh-keysign" version="9.9p1" release="11.el10.alma.1" epoch="0" arch="aarch64" src="openssh-9.9p1-11.el10.alma.1.src.rpm">
          <filename>openssh-keysign-9.9p1-11.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">7b59f28b47829ef740074bda7084fe2935b269be9a561378c5239b1c23c29f90</sum>
        </package>
        <package name="openssh-askpass" version="9.9p1" release="11.el10.alma.1" epoch="0" arch="aarch64" src="openssh-9.9p1-11.el10.alma.1.src.rpm">
          <filename>openssh-askpass-9.9p1-11.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">cf40a1d916eb8e9a08a7f7253a35506ab3b89e6de6a994e6e9bb4be042a27b09</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20155</id>
    <title>Moderate: binutils security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:47:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.  

Security Fix(es):  

  * binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption (CVE-2025-5244)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20155" id="RHSA-2025:20155" type="rhsa" title="RHSA-2025:20155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5244" id="CVE-2025-5244" type="cve" title="CVE-2025-5244"/>
      <reference href="https://bugzilla.redhat.com/2368763" id="2368763" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20155.html" id="ALSA-2025:20155" type="self" title="ALSA-2025:20155"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="binutils-devel" version="2.41" release="58.el10.alma.1" epoch="0" arch="aarch64" src="binutils-2.41-58.el10.alma.1.src.rpm">
          <filename>binutils-devel-2.41-58.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">f5645aa2d506cba33903dbf43616543d98e89bd8a5415f77bb864c43c814c218</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20181</id>
    <title>Important: pam security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:46:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pam security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  

Security Fix(es):  

  * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20181" id="RHSA-2025:20181" type="rhsa" title="RHSA-2025:20181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6020" id="CVE-2025-6020" type="cve" title="CVE-2025-6020"/>
      <reference href="https://bugzilla.redhat.com/2372512" id="2372512" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20181.html" id="ALSA-2025:20181" type="self" title="ALSA-2025:20181"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="pam-devel" version="1.6.1" release="8.el10" epoch="0" arch="aarch64" src="pam-1.6.1-8.el10.src.rpm">
          <filename>pam-devel-1.6.1-8.el10.aarch64.rpm</filename>
          <sum type="sha256">1d6bf7e9f836b9f2dc5c652b66837e1fd6cc03fe19c74d16a121e352437d4c91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20478</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:49:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zziplib security update</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.  

Security Fix(es):  

  * zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20478" id="RHSA-2025:20478" type="rhsa" title="RHSA-2025:20478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2018-17828" id="CVE-2018-17828" type="cve" title="CVE-2018-17828"/>
      <reference href="https://bugzilla.redhat.com/1635888" id="1635888" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20478.html" id="ALSA-2025:20478" type="self" title="ALSA-2025:20478"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="zziplib" version="0.13.78" release="2.el10" epoch="0" arch="aarch64" src="zziplib-0.13.78-2.el10.src.rpm">
          <filename>zziplib-0.13.78-2.el10.aarch64.rpm</filename>
          <sum type="sha256">aa950f817e0e3a6bb6902a39b10eb4c82114dcd25b27a8e63303f05b6f50d83c</sum>
        </package>
        <package name="zziplib-utils" version="0.13.78" release="2.el10" epoch="0" arch="aarch64" src="zziplib-0.13.78-2.el10.src.rpm">
          <filename>zziplib-utils-0.13.78-2.el10.aarch64.rpm</filename>
          <sum type="sha256">bdf593698550d6dc39ec38667580a621e5caad44ce2b2b736fcb2521b19c6568</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20983</id>
    <title>Important: podman security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-25 10:54:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * database/sql: Postgres Scan Race Condition (CVE-2025-47907)
  * podman: Podman kube play command may overwrite host files (CVE-2025-9566)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20983" id="RHSA-2025:20983" type="rhsa" title="RHSA-2025:20983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47907" id="CVE-2025-47907" type="cve" title="CVE-2025-47907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9566" id="CVE-2025-9566" type="cve" title="CVE-2025-9566"/>
      <reference href="https://bugzilla.redhat.com/2387083" id="2387083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393152" id="2393152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20983.html" id="ALSA-2025:20983" type="self" title="ALSA-2025:20983"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="podman-docker" version="5.6.0" release="5.el10_1" epoch="7" arch="noarch" src="podman-5.6.0-5.el10_1.src.rpm">
          <filename>podman-docker-5.6.0-5.el10_1.noarch.rpm</filename>
          <sum type="sha256">03eac3ff3e99f3c5fdc6d05c79a823258e79241e968c2d8fd6d5bb67df078186</sum>
        </package>
        <package name="podman" version="5.6.0" release="5.el10_1" epoch="7" arch="aarch64" src="podman-5.6.0-5.el10_1.src.rpm">
          <filename>podman-5.6.0-5.el10_1.aarch64.rpm</filename>
          <sum type="sha256">055fac7269c588fe19b639b2733c9719afe148c65bd69f03b120c57f04eb2c2e</sum>
        </package>
        <package name="podman-remote" version="5.6.0" release="5.el10_1" epoch="7" arch="aarch64" src="podman-5.6.0-5.el10_1.src.rpm">
          <filename>podman-remote-5.6.0-5.el10_1.aarch64.rpm</filename>
          <sum type="sha256">f3a29e28b7967edd65f5bc1d78b4a464b381b6a7c1094a9338b8b5278e7fbec0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20994</id>
    <title>Important: ipa security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-05 09:05:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  

Security Fix(es):  

  * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20994" id="RHSA-2025:20994" type="rhsa" title="RHSA-2025:20994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7493" id="CVE-2025-7493" type="cve" title="CVE-2025-7493"/>
      <reference href="https://bugzilla.redhat.com/2389448" id="2389448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20994.html" id="ALSA-2025:20994" type="self" title="ALSA-2025:20994"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="ipa-client" version="4.12.2" release="24.el10_1.1" epoch="0" arch="aarch64" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-client-4.12.2-24.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">0d4049f24a2de643f5ecdb270d5a3e0db1db62b2b8d5a537edceeb17f336482a</sum>
        </package>
        <package name="python3-ipaclient" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>python3-ipaclient-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">1e28ee28b917d0ed61bbb988255ead240484132e868554759101aa0d565cdf57</sum>
        </package>
        <package name="ipa-client-common" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-client-common-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">376fa77e7e52639583dfac92fcbf84f96bca35d883cd97d2752fa18c555d9c64</sum>
        </package>
        <package name="ipa-client-samba" version="4.12.2" release="24.el10_1.1" epoch="0" arch="aarch64" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-client-samba-4.12.2-24.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">3f171f34ee11653b1ec5ee703102482393593f6ffc0d7108e7f13c4e82a9fe23</sum>
        </package>
        <package name="ipa-selinux-nfast" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-selinux-nfast-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">56185a3d8b003718879be77f9c83ef6054e8c4760d036b80b70a295e2ac3536b</sum>
        </package>
        <package name="ipa-server-common" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-server-common-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">59dd95cde9c15e5af243ed6bee91ddc5e15945cc14b3fb9826452a6d0cb26d3e</sum>
        </package>
        <package name="ipa-server-dns" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-server-dns-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">70828fc2c81a8aefa2701e3a9087ab82ec8c754bc9854ec41691e24c96bc6cff</sum>
        </package>
        <package name="ipa-selinux-luna" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-selinux-luna-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">7897ed959fa71f31826c7454dd7cc21f8489196358eb8bccdf372ea3a3fa2c29</sum>
        </package>
        <package name="ipa-client-epn" version="4.12.2" release="24.el10_1.1" epoch="0" arch="aarch64" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-client-epn-4.12.2-24.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">96dd48551e7535c54693f5714122fe9594bbf1cd270f58084875536d6dffe80d</sum>
        </package>
        <package name="python3-ipaserver" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>python3-ipaserver-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">9f86bf32f3eb2276cbbdeedf501d93dda0a17bc6d330c0b26a285a96622bcce1</sum>
        </package>
        <package name="ipa-selinux" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-selinux-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">a2aaff0c358250a9c92f250523e8685e21a2082bc74283bea6d9d9272bc2d295</sum>
        </package>
        <package name="ipa-server-trust-ad" version="4.12.2" release="24.el10_1.1" epoch="0" arch="aarch64" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-server-trust-ad-4.12.2-24.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">b3f89a3bc9d0ebd58a3f2e8dddf6a37e7b4a911395794c18c86a70b2f879402e</sum>
        </package>
        <package name="ipa-common" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-common-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">e065fac6be188f69a86ce3909bbab62ccfba4f634df2446292b89b03c609666e</sum>
        </package>
        <package name="ipa-client-encrypted-dns" version="4.12.2" release="24.el10_1.1" epoch="0" arch="aarch64" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-client-encrypted-dns-4.12.2-24.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">e411306395b97828fd503d437086c645644a9afc4d55930da4372956221ffd57</sum>
        </package>
        <package name="python3-ipalib" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>python3-ipalib-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">f13cc6675a7f285a61a8f25ef13cd08cd898f3262e692ea1f27de78c9f95de71</sum>
        </package>
        <package name="ipa-server-encrypted-dns" version="4.12.2" release="24.el10_1.1" epoch="0" arch="aarch64" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-server-encrypted-dns-4.12.2-24.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">fad3122af0f465e5a71890bfed4e874cd27143602be18eeff38de31e23cccb7d</sum>
        </package>
        <package name="ipa-server" version="4.12.2" release="24.el10_1.1" epoch="0" arch="aarch64" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>ipa-server-4.12.2-24.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">fe50204d2bc794e4883dc924253a9b71f423245f41a2ed94b9f1bcb832d9aac2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20998</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:51:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20998" id="RHSA-2025:20998" type="rhsa" title="RHSA-2025:20998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20998.html" id="ALSA-2025:20998" type="self" title="ALSA-2025:20998"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="libtiff-devel" version="4.6.0" release="6.el10_1.1" epoch="0" arch="aarch64" src="libtiff-4.6.0-6.el10_1.1.src.rpm">
          <filename>libtiff-devel-4.6.0-6.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">9617ab22adf2d6356a170b24c9a9adfad8d15ba0ff976bb54b6dd4e179d231d9</sum>
        </package>
        <package name="libtiff" version="4.6.0" release="6.el10_1.1" epoch="0" arch="aarch64" src="libtiff-4.6.0-6.el10_1.1.src.rpm">
          <filename>libtiff-4.6.0-6.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">f232108aa59915bacb41de82e120633938501483f1b9d1d0a528834dba810e71</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21002</id>
    <title>Important: squid security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:53:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>squid security update</summary>
    <description>Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.  

Security Fix(es):  

  * squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21002" id="RHSA-2025:21002" type="rhsa" title="RHSA-2025:21002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62168" id="CVE-2025-62168" type="cve" title="CVE-2025-62168"/>
      <reference href="https://bugzilla.redhat.com/2404736" id="2404736" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21002.html" id="ALSA-2025:21002" type="self" title="ALSA-2025:21002"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="squid" version="6.10" release="6.el10_1.1" epoch="7" arch="aarch64" src="squid-6.10-6.el10_1.1.src.rpm">
          <filename>squid-6.10-6.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">4b4ebc106e7ebad1da5d51cbe52197ccd8706b45db668905daf06b75a498b046</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21013</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:54:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21013" id="RHSA-2025:21013" type="rhsa" title="RHSA-2025:21013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5318" id="CVE-2025-5318" type="cve" title="CVE-2025-5318"/>
      <reference href="https://bugzilla.redhat.com/2369131" id="2369131" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21013.html" id="ALSA-2025:21013" type="self" title="ALSA-2025:21013"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="libssh-devel" version="0.11.1" release="4.el10_1" epoch="0" arch="aarch64" src="libssh-0.11.1-4.el10_1.src.rpm">
          <filename>libssh-devel-0.11.1-4.el10_1.aarch64.rpm</filename>
          <sum type="sha256">029da1222f58a686358bc125e7ff069cbda3021a0c20ebc96368335e91c1f574</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21015</id>
    <title>Moderate: vim security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:56:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim path traversal (CVE-2025-53906)
  * vim: Vim path traversial (CVE-2025-53905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21015" id="RHSA-2025:21015" type="rhsa" title="RHSA-2025:21015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53905" id="CVE-2025-53905" type="cve" title="CVE-2025-53905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53906" id="CVE-2025-53906" type="cve" title="CVE-2025-53906"/>
      <reference href="https://bugzilla.redhat.com/2380360" id="2380360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380362" id="2380362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21015.html" id="ALSA-2025:21015" type="self" title="ALSA-2025:21015"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="vim-enhanced" version="9.1.083" release="6.el10_1" epoch="2" arch="aarch64" src="vim-9.1.083-6.el10_1.src.rpm">
          <filename>vim-enhanced-9.1.083-6.el10_1.aarch64.rpm</filename>
          <sum type="sha256">370c5486b2485aa4164b4b7a9399239e2d7c2470cec9e70598fbbe0c7a77a57b</sum>
        </package>
        <package name="vim-common" version="9.1.083" release="6.el10_1" epoch="2" arch="aarch64" src="vim-9.1.083-6.el10_1.src.rpm">
          <filename>vim-common-9.1.083-6.el10_1.aarch64.rpm</filename>
          <sum type="sha256">44c5abbbe51a6c4e1af7a9c196f603164ebbb2ac1e4ebf681a7cdc4211eed169</sum>
        </package>
        <package name="vim-X11" version="9.1.083" release="6.el10_1" epoch="2" arch="aarch64" src="vim-9.1.083-6.el10_1.src.rpm">
          <filename>vim-X11-9.1.083-6.el10_1.aarch64.rpm</filename>
          <sum type="sha256">565d20a14b14faf3a2957618bb0111d2d608fc9f336b2ef83148a604de7b1ca7</sum>
        </package>
        <package name="xxd" version="9.1.083" release="6.el10_1" epoch="2" arch="aarch64" src="vim-9.1.083-6.el10_1.src.rpm">
          <filename>xxd-9.1.083-6.el10_1.aarch64.rpm</filename>
          <sum type="sha256">82206140d7c4cbb7a6e1402276263e6f4fcec87be3c579d9438fcd4d06993457</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21020</id>
    <title>Important: sssd security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2026-01-14 12:41:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.  

Security Fix(es):  

  * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21020" id="RHSA-2025:21020" type="rhsa" title="RHSA-2025:21020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11561" id="CVE-2025-11561" type="cve" title="CVE-2025-11561"/>
      <reference href="https://bugzilla.redhat.com/2402727" id="2402727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21020.html" id="ALSA-2025:21020" type="self" title="ALSA-2025:21020"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="sssd-idp" version="2.11.1" release="2.el10_1.1" epoch="0" arch="aarch64" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-idp-2.11.1-2.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">389b5945250576d5d697ffa19c3a7af1e92edf7ae71ec026c9b0518a7f28d12f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21030</id>
    <title>Important: expat security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:57:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.  

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21030" id="RHSA-2025:21030" type="rhsa" title="RHSA-2025:21030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21030.html" id="ALSA-2025:21030" type="self" title="ALSA-2025:21030"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="expat-devel" version="2.7.1" release="1.el10_1.3" epoch="0" arch="aarch64" src="expat-2.7.1-1.el10_1.3.src.rpm">
          <filename>expat-devel-2.7.1-1.el10_1.3.aarch64.rpm</filename>
          <sum type="sha256">cbcee89ba564db32d41fd76689b6f2b8e47fd3823e801ef013295e965f148bd6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21032</id>
    <title>Important: libsoup3 security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:58:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)
  * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21032" id="RHSA-2025:21032" type="rhsa" title="RHSA-2025:21032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11021" id="CVE-2025-11021" type="cve" title="CVE-2025-11021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4945" id="CVE-2025-4945" type="cve" title="CVE-2025-4945"/>
      <reference href="https://bugzilla.redhat.com/2367175" id="2367175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2399627" id="2399627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21032.html" id="ALSA-2025:21032" type="self" title="ALSA-2025:21032"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="libsoup3-devel" version="3.6.5" release="3.el10_1.6" epoch="0" arch="aarch64" src="libsoup3-3.6.5-3.el10_1.6.src.rpm">
          <filename>libsoup3-devel-3.6.5-3.el10_1.6.aarch64.rpm</filename>
          <sum type="sha256">a2bbd8b993174adc6b6dcef0b04aa58991009230dd2811a02378612b3adaca3c</sum>
        </package>
        <package name="libsoup3" version="3.6.5" release="3.el10_1.6" epoch="0" arch="aarch64" src="libsoup3-3.6.5-3.el10_1.6.src.rpm">
          <filename>libsoup3-3.6.5-3.el10_1.6.aarch64.rpm</filename>
          <sum type="sha256">bb1275689c4b92e9277549b2f8923c372a520e35c9bd55debd962d4b8714d72f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21034</id>
    <title>Important: bind security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 09:00:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21034" id="RHSA-2025:21034" type="rhsa" title="RHSA-2025:21034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8677" id="CVE-2025-8677" type="cve" title="CVE-2025-8677"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405830" id="2405830" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21034.html" id="ALSA-2025:21034" type="self" title="ALSA-2025:21034"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="bind-dnssec-utils" version="9.18.33" release="10.el10_1.2" epoch="32" arch="aarch64" src="bind-9.18.33-10.el10_1.2.src.rpm">
          <filename>bind-dnssec-utils-9.18.33-10.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">05a916d2d8fcbca19e7cd19cc3e44f6029cdf54565866b48ec1e69f4b288a1b3</sum>
        </package>
        <package name="bind-license" version="9.18.33" release="10.el10_1.2" epoch="32" arch="noarch" src="bind-9.18.33-10.el10_1.2.src.rpm">
          <filename>bind-license-9.18.33-10.el10_1.2.noarch.rpm</filename>
          <sum type="sha256">60860518146a337085ddae781b62f3329c321059775c4af709bd2b8e5bfc264f</sum>
        </package>
        <package name="bind-utils" version="9.18.33" release="10.el10_1.2" epoch="32" arch="aarch64" src="bind-9.18.33-10.el10_1.2.src.rpm">
          <filename>bind-utils-9.18.33-10.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">72b34611c4c00338d97eadc6eb4acfe45083ae9ec1f2741aefd3a6b71bdacfd7</sum>
        </package>
        <package name="bind-chroot" version="9.18.33" release="10.el10_1.2" epoch="32" arch="aarch64" src="bind-9.18.33-10.el10_1.2.src.rpm">
          <filename>bind-chroot-9.18.33-10.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">d6b37fda47ee257fee86f1d1852e92afd4f8328178ef0f13b27916b79a5a1299</sum>
        </package>
        <package name="bind-libs" version="9.18.33" release="10.el10_1.2" epoch="32" arch="aarch64" src="bind-9.18.33-10.el10_1.2.src.rpm">
          <filename>bind-libs-9.18.33-10.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">d6e880dea6e19251de7e8100e48934d6290f5a1577d0bffd496abcf70d1771f8</sum>
        </package>
        <package name="bind" version="9.18.33" release="10.el10_1.2" epoch="32" arch="aarch64" src="bind-9.18.33-10.el10_1.2.src.rpm">
          <filename>bind-9.18.33-10.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">e67d30311c6e6eb5521160ccadc6c09032ed7082768802d3d1cc2da90fb2accb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21035</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 09:01:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21035" id="RHSA-2025:21035" type="rhsa" title="RHSA-2025:21035"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21035.html" id="ALSA-2025:21035" type="self" title="ALSA-2025:21035"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="xorg-x11-server-Xwayland" version="24.1.5" release="5.el10_1" epoch="0" arch="aarch64" src="xorg-x11-server-Xwayland-24.1.5-5.el10_1.src.rpm">
          <filename>xorg-x11-server-Xwayland-24.1.5-5.el10_1.aarch64.rpm</filename>
          <sum type="sha256">4fe8b33a298f05311525707fd96faa610d0fd7d06086d87d5e56ff4165be9925</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21038</id>
    <title>Important: kea security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-05 08:28:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kea security update</summary>
    <description>DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers support DNS Update mechanism, using stand-alone DDNS daemon.  

Security Fix(es):  

  * kea: Invalid characters cause assert (CVE-2025-11232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21038" id="RHSA-2025:21038" type="rhsa" title="RHSA-2025:21038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11232" id="CVE-2025-11232" type="cve" title="CVE-2025-11232"/>
      <reference href="https://bugzilla.redhat.com/2407178" id="2407178" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21038.html" id="ALSA-2025:21038" type="self" title="ALSA-2025:21038"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="kea-hooks" version="3.0.1" release="2.el10_1" epoch="0" arch="aarch64" src="kea-3.0.1-2.el10_1.src.rpm">
          <filename>kea-hooks-3.0.1-2.el10_1.aarch64.rpm</filename>
          <sum type="sha256">0f416d1bfd2f20260c91c25074fbe6a49a4840c83ab9f7076e545d8743a1040e</sum>
        </package>
        <package name="kea-doc" version="3.0.1" release="2.el10_1" epoch="0" arch="noarch" src="kea-3.0.1-2.el10_1.src.rpm">
          <filename>kea-doc-3.0.1-2.el10_1.noarch.rpm</filename>
          <sum type="sha256">83d6b396dacc61b679b6b24828049b2a0a6207c92af6f832054613cf7f1b3850</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21142</id>
    <title>Important: python-kdcproxy security update</title>
    <issued date="2025-11-12 00:00:00"/>
    <updated date="2025-11-24 12:51:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-kdcproxy security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV (CVE-2025-59088)
  * python-kdcproxy: Remote DoS via unbounded TCP upstream buffering (CVE-2025-59089)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21142" id="RHSA-2025:21142" type="rhsa" title="RHSA-2025:21142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59088" id="CVE-2025-59088" type="cve" title="CVE-2025-59088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59089" id="CVE-2025-59089" type="cve" title="CVE-2025-59089"/>
      <reference href="https://bugzilla.redhat.com/2393955" id="2393955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393958" id="2393958" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21142.html" id="ALSA-2025:21142" type="self" title="ALSA-2025:21142"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="python3-kdcproxy" version="1.0.0" release="19.el10_1" epoch="0" arch="noarch" src="python-kdcproxy-1.0.0-19.el10_1.src.rpm">
          <filename>python3-kdcproxy-1.0.0-19.el10_1.noarch.rpm</filename>
          <sum type="sha256">9ae283aca89a2337da3e6466829b16903bc15f65c883153894e3194f0ab695b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21220</id>
    <title>Important: podman security update</title>
    <issued date="2025-11-13 00:00:00"/>
    <updated date="2025-11-25 10:45:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21220" id="RHSA-2025:21220" type="rhsa" title="RHSA-2025:21220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52881" id="CVE-2025-52881" type="cve" title="CVE-2025-52881"/>
      <reference href="https://bugzilla.redhat.com/2404715" id="2404715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21220.html" id="ALSA-2025:21220" type="self" title="ALSA-2025:21220"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="podman-remote" version="5.6.0" release="6.el10_1" epoch="7" arch="aarch64" src="podman-5.6.0-6.el10_1.src.rpm">
          <filename>podman-remote-5.6.0-6.el10_1.aarch64.rpm</filename>
          <sum type="sha256">42c0df4561f3f843d58aafece6e5a17c654e84574e73deb75f8aefb618ea0bf3</sum>
        </package>
        <package name="podman" version="5.6.0" release="6.el10_1" epoch="7" arch="aarch64" src="podman-5.6.0-6.el10_1.src.rpm">
          <filename>podman-5.6.0-6.el10_1.aarch64.rpm</filename>
          <sum type="sha256">8900e6adb7cfd278f0be1a3eb38d7d5b8cebcc07bd3db2979885eebf16467ec4</sum>
        </package>
        <package name="podman-docker" version="5.6.0" release="6.el10_1" epoch="7" arch="noarch" src="podman-5.6.0-6.el10_1.src.rpm">
          <filename>podman-docker-5.6.0-6.el10_1.noarch.rpm</filename>
          <sum type="sha256">bbee7190c9c78a3c8311407b12ff35c56fd999de6b729508a7eb84422ef384bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21248</id>
    <title>Moderate: openssl security update</title>
    <issued date="2025-11-13 00:00:00"/>
    <updated date="2025-11-25 09:31:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap (CVE-2025-9230)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21248" id="RHSA-2025:21248" type="rhsa" title="RHSA-2025:21248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9230" id="CVE-2025-9230" type="cve" title="CVE-2025-9230"/>
      <reference href="https://bugzilla.redhat.com/2396054" id="2396054" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21248.html" id="ALSA-2025:21248" type="self" title="ALSA-2025:21248"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="openssl-devel" version="3.5.1" release="4.el10_1.alma.1" epoch="1" arch="aarch64" src="openssl-3.5.1-4.el10_1.alma.1.src.rpm">
          <filename>openssl-devel-3.5.1-4.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">0eea57bdb6838d8e3d23cccde043a2968d3d3401e40942245a3baf12f41ad696</sum>
        </package>
        <package name="openssl-perl" version="3.5.1" release="4.el10_1.alma.1" epoch="1" arch="aarch64" src="openssl-3.5.1-4.el10_1.alma.1.src.rpm">
          <filename>openssl-perl-3.5.1-4.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">38d7d28eb680f02882f7aa843185a6fd1769eae785cf31c7949d05c256fef286</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21281</id>
    <title>Important: firefox security update</title>
    <issued date="2025-11-13 00:00:00"/>
    <updated date="2025-11-25 09:59:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)
  * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)
  * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)
  * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)
  * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)
  * firefox: Race condition in the Graphics component (CVE-2025-13012)
  * firefox: Spoofing issue in Firefox (CVE-2025-13015)
  * firefox: Mitigation bypass in the DOM: Core &amp; HTML component (CVE-2025-13013)
  * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21281" id="RHSA-2025:21281" type="rhsa" title="RHSA-2025:21281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13012" id="CVE-2025-13012" type="cve" title="CVE-2025-13012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13013" id="CVE-2025-13013" type="cve" title="CVE-2025-13013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13014" id="CVE-2025-13014" type="cve" title="CVE-2025-13014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13015" id="CVE-2025-13015" type="cve" title="CVE-2025-13015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13016" id="CVE-2025-13016" type="cve" title="CVE-2025-13016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13017" id="CVE-2025-13017" type="cve" title="CVE-2025-13017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13018" id="CVE-2025-13018" type="cve" title="CVE-2025-13018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13019" id="CVE-2025-13019" type="cve" title="CVE-2025-13019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13020" id="CVE-2025-13020" type="cve" title="CVE-2025-13020"/>
      <reference href="https://bugzilla.redhat.com/2414079" id="2414079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414080" id="2414080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414083" id="2414083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414084" id="2414084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414085" id="2414085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414086" id="2414086" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414090" id="2414090" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414091" id="2414091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414092" id="2414092" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21281.html" id="ALSA-2025:21281" type="self" title="ALSA-2025:21281"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="firefox" version="140.5.0" release="2.el10_1" epoch="0" arch="aarch64" src="firefox-140.5.0-2.el10_1.src.rpm">
          <filename>firefox-140.5.0-2.el10_1.aarch64.rpm</filename>
          <sum type="sha256">a068784498e7a2af98a4028aa173967948fe04c27cfc38a238387dc9077a9f25</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21691</id>
    <title>Important: haproxy security update</title>
    <issued date="2025-11-18 00:00:00"/>
    <updated date="2025-11-24 12:50:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>haproxy security update</summary>
    <description>The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.  

Security Fix(es):  

  * haproxy: denial of service vulnerability in HAProxy mjson library (CVE-2025-11230)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21691" id="RHSA-2025:21691" type="rhsa" title="RHSA-2025:21691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11230" id="CVE-2025-11230" type="cve" title="CVE-2025-11230"/>
      <reference href="https://bugzilla.redhat.com/2413003" id="2413003" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21691.html" id="ALSA-2025:21691" type="self" title="ALSA-2025:21691"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="haproxy" version="3.0.5" release="4.el10_1.1" epoch="0" arch="aarch64" src="haproxy-3.0.5-4.el10_1.1.src.rpm">
          <filename>haproxy-3.0.5-4.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">6abaa596728d9ef6b180579f67bcd04df8413e9f07cd20fad9fad7c55da1c7b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21816</id>
    <title>Moderate: delve and golang security update</title>
    <issued date="2025-11-20 00:00:00"/>
    <updated date="2025-11-24 12:49:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>delve and golang security update</summary>
    <description>The Go Programming Language.  

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21816" id="RHSA-2025:21816" type="rhsa" title="RHSA-2025:21816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21816.html" id="ALSA-2025:21816" type="self" title="ALSA-2025:21816"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="golang-misc" version="1.25.3" release="1.el10_1.alma.1" epoch="0" arch="noarch" src="golang-1.25.3-1.el10_1.alma.1.src.rpm">
          <filename>golang-misc-1.25.3-1.el10_1.alma.1.noarch.rpm</filename>
          <sum type="sha256">49304f69afac67585b5ceb9765075f69f3816c7c4576ec472ef0f9638b4ad77f</sum>
        </package>
        <package name="golang-tests" version="1.25.3" release="1.el10_1.alma.1" epoch="0" arch="noarch" src="golang-1.25.3-1.el10_1.alma.1.src.rpm">
          <filename>golang-tests-1.25.3-1.el10_1.alma.1.noarch.rpm</filename>
          <sum type="sha256">49f604d23e0e8284ef514ce78a0f21991c29e91862d73db3c9ac9e11ceb76c9c</sum>
        </package>
        <package name="golang-bin" version="1.25.3" release="1.el10_1.alma.1" epoch="0" arch="aarch64" src="golang-1.25.3-1.el10_1.alma.1.src.rpm">
          <filename>golang-bin-1.25.3-1.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">585bf58f178400b636c158d77b238955bf78ee175512d348b0b21d36d2d77b4e</sum>
        </package>
        <package name="golang-docs" version="1.25.3" release="1.el10_1.alma.1" epoch="0" arch="noarch" src="golang-1.25.3-1.el10_1.alma.1.src.rpm">
          <filename>golang-docs-1.25.3-1.el10_1.alma.1.noarch.rpm</filename>
          <sum type="sha256">82de1cafee152a0535a71bc740a4dc2fea91c8449d101fdff2ccf971c86084fa</sum>
        </package>
        <package name="golang-src" version="1.25.3" release="1.el10_1.alma.1" epoch="0" arch="noarch" src="golang-1.25.3-1.el10_1.alma.1.src.rpm">
          <filename>golang-src-1.25.3-1.el10_1.alma.1.noarch.rpm</filename>
          <sum type="sha256">8ac3d3ded5b2acb1f09beb47e9d864f44f5a6ad93d59a24c9501b44b070ab60a</sum>
        </package>
        <package name="go-toolset" version="1.25.3" release="1.el10_1.alma.1" epoch="0" arch="aarch64" src="golang-1.25.3-1.el10_1.alma.1.src.rpm">
          <filename>go-toolset-1.25.3-1.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">8dc0174226f9c216c45e7f7c5f054b73112e68f5d17864ea4c04e6e6ad742408</sum>
        </package>
        <package name="golang-race" version="1.25.3" release="1.el10_1.alma.1" epoch="0" arch="aarch64" src="golang-1.25.3-1.el10_1.alma.1.src.rpm">
          <filename>golang-race-1.25.3-1.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">b570321d690fbadba71c1bba8e054153db00ad062815d285a935edaa0eeb404b</sum>
        </package>
        <package name="delve" version="1.25.2" release="1.el10_1" epoch="0" arch="aarch64" src="delve-1.25.2-1.el10_1.src.rpm">
          <filename>delve-1.25.2-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">cca528050e2151c11bfee925bbd21784cc15ce9743a9876d52bd943d3dffebe3</sum>
        </package>
        <package name="golang" version="1.25.3" release="1.el10_1.alma.1" epoch="0" arch="aarch64" src="golang-1.25.3-1.el10_1.alma.1.src.rpm">
          <filename>golang-1.25.3-1.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">d7d16399ed64a1ea060cf5cab203f9ce6594ecc80fe9e7df08d0ffe60aec11ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21843</id>
    <title>Important: thunderbird security update</title>
    <issued date="2025-11-20 00:00:00"/>
    <updated date="2025-11-24 10:41:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)
  * firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)
  * firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)
  * firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)
  * firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)
  * firefox: Race condition in the Graphics component (CVE-2025-13012)
  * firefox: Spoofing issue in Firefox (CVE-2025-13015)
  * firefox: Mitigation bypass in the DOM: Core &amp; HTML component (CVE-2025-13013)
  * firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21843" id="RHSA-2025:21843" type="rhsa" title="RHSA-2025:21843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13012" id="CVE-2025-13012" type="cve" title="CVE-2025-13012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13013" id="CVE-2025-13013" type="cve" title="CVE-2025-13013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13014" id="CVE-2025-13014" type="cve" title="CVE-2025-13014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13015" id="CVE-2025-13015" type="cve" title="CVE-2025-13015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13016" id="CVE-2025-13016" type="cve" title="CVE-2025-13016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13017" id="CVE-2025-13017" type="cve" title="CVE-2025-13017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13018" id="CVE-2025-13018" type="cve" title="CVE-2025-13018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13019" id="CVE-2025-13019" type="cve" title="CVE-2025-13019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13020" id="CVE-2025-13020" type="cve" title="CVE-2025-13020"/>
      <reference href="https://bugzilla.redhat.com/2414079" id="2414079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414080" id="2414080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414083" id="2414083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414084" id="2414084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414085" id="2414085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414086" id="2414086" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414090" id="2414090" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414091" id="2414091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414092" id="2414092" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21843.html" id="ALSA-2025:21843" type="self" title="ALSA-2025:21843"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="thunderbird" version="140.5.0" release="2.el10_1" epoch="0" arch="aarch64" src="thunderbird-140.5.0-2.el10_1.src.rpm">
          <filename>thunderbird-140.5.0-2.el10_1.aarch64.rpm</filename>
          <sum type="sha256">103646602486a20c075f210361c6dbec1e12730eea1c388b8eb70c3be6f728a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21931</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-12-05 08:40:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CVE-2025-39730)
  * kernel: tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect() (CVE-2025-39955)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21931" id="RHSA-2025:21931" type="rhsa" title="RHSA-2025:21931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39730" id="CVE-2025-39730" type="cve" title="CVE-2025-39730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39955" id="CVE-2025-39955" type="cve" title="CVE-2025-39955"/>
      <reference href="https://bugzilla.redhat.com/2393731" id="2393731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402699" id="2402699" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21931.html" id="ALSA-2025:21931" type="self" title="ALSA-2025:21931"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="kernel-debug-devel" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">41ba2477c20dfeb64da62736a36345d247b64af4f633e1b7dc6b8fe9db32c341</sum>
        </package>
        <package name="kernel-64k-devel" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">4b3c75f94672c04208bb195279d88fe89a2ed3741d1ddc85ce6c2fb5de6afe5a</sum>
        </package>
        <package name="kernel-headers" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-headers-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">4ea031bd9a22fec50d2d47c25fc9dcf61072c5189c824ea70a5b2c4a0c799d9a</sum>
        </package>
        <package name="rv" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>rv-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">5b4bc747d1cf64697d1d58f8be844555c0cab2fdd5a698d7443468294ad7fc18</sum>
        </package>
        <package name="rtla" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>rtla-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">783e0b80a274b43f2349aa3d424918660acc4cd29ef62d0511a70b3421dac50d</sum>
        </package>
        <package name="kernel-64k-devel-matched" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-matched-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">8d98042b496b0be7d38e9639901c91097f028fa7b18667174ec2cd6dcb8d6281</sum>
        </package>
        <package name="kernel-devel" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-devel-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">8e741937764af5ff693da878da3e9ddc6b5fa023b475a02cf1df7bc2ae034721</sum>
        </package>
        <package name="kernel-64k-debug-devel" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">a272bdd6d2c93aed444b2d0b412d3245e148662e4029269a7a02e60e75f3952b</sum>
        </package>
        <package name="kernel-64k-debug-devel-matched" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-matched-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">af5a3c6af86c2c1dd4fbb2bba07de6337d35b1c75b9af63977cdd486d74206db</sum>
        </package>
        <package name="perf" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>perf-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">aff7c38fe2d6e2baa07f2a3c405b82d997639f41112bc1a2c4fcde56ca8ed54a</sum>
        </package>
        <package name="kernel-devel-matched" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-devel-matched-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">ed0b5c5671bde8a1132dc86ab367fe197581cf9a7932cd6f3a65c22e1370d514</sum>
        </package>
        <package name="python3-perf" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>python3-perf-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">f29973d1853e19f08fe6cf1ac3794958ab8495b0117913934be2d0b3b4e9294a</sum>
        </package>
        <package name="kernel-doc" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-doc-6.12.0-124.13.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">f4c8e6dac5448b40f97a6ab5850533473e8e2b78cd32441dd4e9a4910b6d4d51</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-matched-6.12.0-124.13.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">fec459e9ddcaeb65db1a194325c215e2cceabea9b2994b28a8a26aaf8e67b799</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21936</id>
    <title>Important: valkey security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-12-05 08:20:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>valkey security update</summary>
    <description>Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.  

Security Fix(es):  

  * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
  * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
  * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
  * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21936" id="RHSA-2025:21936" type="rhsa" title="RHSA-2025:21936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46817" id="CVE-2025-46817" type="cve" title="CVE-2025-46817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46818" id="CVE-2025-46818" type="cve" title="CVE-2025-46818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46819" id="CVE-2025-46819" type="cve" title="CVE-2025-46819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49844" id="CVE-2025-49844" type="cve" title="CVE-2025-49844"/>
      <reference href="https://bugzilla.redhat.com/2401258" id="2401258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401292" id="2401292" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401322" id="2401322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401324" id="2401324" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21936.html" id="ALSA-2025:21936" type="self" title="ALSA-2025:21936"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="valkey-devel" version="8.0.6" release="2.el10_1" epoch="0" arch="aarch64" src="valkey-8.0.6-2.el10_1.src.rpm">
          <filename>valkey-devel-8.0.6-2.el10_1.aarch64.rpm</filename>
          <sum type="sha256">72db73852fcf230a7bdf7934ea25e777d3163d5242aba5420aab3ae0556a2d01</sum>
        </package>
        <package name="valkey" version="8.0.6" release="2.el10_1" epoch="0" arch="aarch64" src="valkey-8.0.6-2.el10_1.src.rpm">
          <filename>valkey-8.0.6-2.el10_1.aarch64.rpm</filename>
          <sum type="sha256">843c9ce8b2eb6370acb220f562229c8ccc5fa8a44188abf0931b28f22bc26f23</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22012</id>
    <title>Important: buildah security update</title>
    <issued date="2025-11-25 00:00:00"/>
    <updated date="2025-12-05 07:44:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)
  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22012" id="RHSA-2025:22012" type="rhsa" title="RHSA-2025:22012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52881" id="CVE-2025-52881" type="cve" title="CVE-2025-52881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2404715" id="2404715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22012.html" id="ALSA-2025:22012" type="self" title="ALSA-2025:22012"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="buildah" version="1.41.6" release="1.el10_1" epoch="2" arch="aarch64" src="buildah-1.41.6-1.el10_1.src.rpm">
          <filename>buildah-1.41.6-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">882820b130f08f0f14308fa912e76757b94ea45e062dcc187dc2f875c2097c8b</sum>
        </package>
        <package name="buildah-tests" version="1.41.6" release="1.el10_1" epoch="2" arch="aarch64" src="buildah-1.41.6-1.el10_1.src.rpm">
          <filename>buildah-tests-1.41.6-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">d7fc1bb04847913a5623f5a72cd10cbb196da2e4ed8b9a9d73cab087912d7c32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22361</id>
    <title>Moderate: qt6-qtquick3d security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-05 07:43:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt6-qtquick3d security update</summary>
    <description>The Qt 6 Quick3D library.  

Security Fix(es):  

  * assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow (CVE-2025-11277)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22361" id="RHSA-2025:22361" type="rhsa" title="RHSA-2025:22361"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11277" id="CVE-2025-11277" type="cve" title="CVE-2025-11277"/>
      <reference href="https://bugzilla.redhat.com/2401622" id="2401622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22361.html" id="ALSA-2025:22361" type="self" title="ALSA-2025:22361"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="qt6-qtquick3d" version="6.9.1" release="1.el10_1.1" epoch="0" arch="aarch64" src="qt6-qtquick3d-6.9.1-1.el10_1.1.src.rpm">
          <filename>qt6-qtquick3d-6.9.1-1.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">354dba59f5a7525a9b2bb932018496eb930df9863412764a693c2b72508450ec</sum>
        </package>
        <package name="qt6-qtquick3d-devel" version="6.9.1" release="1.el10_1.1" epoch="0" arch="aarch64" src="qt6-qtquick3d-6.9.1-1.el10_1.1.src.rpm">
          <filename>qt6-qtquick3d-devel-6.9.1-1.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">3c2a8608c0e699e56c9b2baa8e1b42e04fae147b3d122ce023761e5c414a7669</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22394</id>
    <title>Moderate: qt6-qtsvg security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-05 07:42:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt6-qtsvg security update</summary>
    <description>Scalable Vector Graphics (SVG) is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices.  

Security Fix(es):  

  * qtsvg: Uncontrolled recursion in Qt SVG module (CVE-2025-10728)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22394" id="RHSA-2025:22394" type="rhsa" title="RHSA-2025:22394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10728" id="CVE-2025-10728" type="cve" title="CVE-2025-10728"/>
      <reference href="https://bugzilla.redhat.com/2401244" id="2401244" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22394.html" id="ALSA-2025:22394" type="self" title="ALSA-2025:22394"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="qt6-qtsvg-devel" version="6.9.1" release="2.el10_1.2" epoch="0" arch="aarch64" src="qt6-qtsvg-6.9.1-2.el10_1.2.src.rpm">
          <filename>qt6-qtsvg-devel-6.9.1-2.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">4ad069325103e97092e2aa6c269afb15367dcb0f3bfa92495d2dd31805e2e5cd</sum>
        </package>
        <package name="qt6-qtsvg" version="6.9.1" release="2.el10_1.2" epoch="0" arch="aarch64" src="qt6-qtsvg-6.9.1-2.el10_1.2.src.rpm">
          <filename>qt6-qtsvg-6.9.1-2.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">bc3d2360216d69eb3edaeede9429cde0d513ccbf905e319e9427a702966ddb04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22395</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-15 12:44:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ublk: make sure ubq-&gt;canceling is set when queue is frozen (CVE-2025-22068)
  * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
  * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
  * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
  * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918)
  * kernel: i40e: fix idx validation in config queues msg (CVE-2025-39971)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22395" id="RHSA-2025:22395" type="rhsa" title="RHSA-2025:22395"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22068" id="CVE-2025-22068" type="cve" title="CVE-2025-22068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38724" id="CVE-2025-38724" type="cve" title="CVE-2025-38724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39883" id="CVE-2025-39883" type="cve" title="CVE-2025-39883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39898" id="CVE-2025-39898" type="cve" title="CVE-2025-39898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39918" id="CVE-2025-39918" type="cve" title="CVE-2025-39918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39971" id="CVE-2025-39971" type="cve" title="CVE-2025-39971"/>
      <reference href="https://bugzilla.redhat.com/2360225" id="2360225" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393172" id="2393172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397553" id="2397553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400598" id="2400598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400628" id="2400628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404108" id="2404108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22395.html" id="ALSA-2025:22395" type="self" title="ALSA-2025:22395"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="kernel-64k-debug-devel" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">045f98c5c48f2663da8e8dfbf0241b5b6f61c496ab5a0442bbc84c2c64e99fe6</sum>
        </package>
        <package name="kernel-64k-debug-devel-matched" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-matched-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">0d39e9110ec9614a47ab45b14283105d52bb8dd535c9a53a9c88cece4fd4ab4e</sum>
        </package>
        <package name="kernel-debug-devel" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">1e9a4cba92bea94c3569b793b76b7329d7b0b2b4ab65899db7021d81a06e35a8</sum>
        </package>
        <package name="perf" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>perf-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">269ad5248fccc297d8314d222a1af5205397ad3e9ffb73ba900de60ee98c5b5a</sum>
        </package>
        <package name="python3-perf" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>python3-perf-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">2ffa94ff7a1b0baa246262decb0d3eab468314064d18a30191073d0bbb518e5f</sum>
        </package>
        <package name="kernel-64k-devel" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">5752b50540c1c2e473d863f4df5df79ce0888edbb9cf7f1e9e11ff38cb88c421</sum>
        </package>
        <package name="rtla" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>rtla-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">6bb67ce66df1c32f8daa5d698898f40a6927e845428d17cd48cf2b21aa61a2af</sum>
        </package>
        <package name="kernel-doc" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-doc-6.12.0-124.16.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">b0cdd74a51a417afcf5410ee817f03daf1637899f085fcbae3ce83db225e528a</sum>
        </package>
        <package name="rv" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>rv-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c62ba72b2bed25409922f54b87d37f865c7e10e86e5fa373f15f2767f77c6bd2</sum>
        </package>
        <package name="kernel-headers" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-headers-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c925053822eda55de365fe434b105b9ca6cf5c5bcf0c49410283065f1a7e9243</sum>
        </package>
        <package name="kernel-64k-devel-matched" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-matched-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">ca8f3387b440e08a794c297703309ae5c4552e443f3c9ac3c35fae44b72285dc</sum>
        </package>
        <package name="kernel-devel-matched" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-devel-matched-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">d2ac86c922fe5b6261c13902744eb9303ceb075b092659044b2f135eb919eb5c</sum>
        </package>
        <package name="kernel-devel" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-devel-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">d2eb4395bee59d935b07444cacc08b747ff322337c542346490e6a619c687f38</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-matched-6.12.0-124.16.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">e0831a842ae8213db268bb05c32176ebc986c76e462ab4768850924fd4d506e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22854</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-08 00:00:00"/>
    <updated date="2025-12-10 08:12:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cifs: Fix oops due to uninitialised variable (CVE-2025-38737)
  * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
  * kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CVE-2025-39982)
  * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979)
  * kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CVE-2025-39983)
  * kernel: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CVE-2025-40047)
  * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
  * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22854" id="RHSA-2025:22854" type="rhsa" title="RHSA-2025:22854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38737" id="CVE-2025-38737" type="cve" title="CVE-2025-38737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39925" id="CVE-2025-39925" type="cve" title="CVE-2025-39925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39979" id="CVE-2025-39979" type="cve" title="CVE-2025-39979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39981" id="CVE-2025-39981" type="cve" title="CVE-2025-39981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39982" id="CVE-2025-39982" type="cve" title="CVE-2025-39982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39983" id="CVE-2025-39983" type="cve" title="CVE-2025-39983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40047" id="CVE-2025-40047" type="cve" title="CVE-2025-40047"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40058" id="CVE-2025-40058" type="cve" title="CVE-2025-40058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40185" id="CVE-2025-40185" type="cve" title="CVE-2025-40185"/>
      <reference href="https://bugzilla.redhat.com/2393527" id="2393527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400629" id="2400629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404100" id="2404100" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404105" id="2404105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404109" id="2404109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404117" id="2404117" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406758" id="2406758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406776" id="2406776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414741" id="2414741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22854.html" id="ALSA-2025:22854" type="self" title="ALSA-2025:22854"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="kernel-64k-devel-matched" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-matched-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">0614a4f02f8cc469e248c0daf780a3e3f38779df79cb373a3c1ed4051397c7e5</sum>
        </package>
        <package name="kernel-doc" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-doc-6.12.0-124.20.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">14605013dfae86d99d6196c605be1591187c35c226cef1257b8292003935424c</sum>
        </package>
        <package name="perf" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>perf-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">216dbd0ed5d98f82064dff9062d5df58b2a0df42371e846a401f7eaceac0fa0f</sum>
        </package>
        <package name="kernel-64k-debug-devel-matched" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-matched-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">24c82405828d3a7ff4d5500b68b44af59ac4b022a29aff03f8593dc0389be141</sum>
        </package>
        <package name="kernel-devel-matched" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-devel-matched-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">43b0b69abb23f2347cf93b199591fb4496464c685de069d5b5ada9ed33c45cec</sum>
        </package>
        <package name="kernel-headers" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-headers-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">59820c527d89d0d6838841b883377b39d7cc6af6775160599ab37326c3fb9cfa</sum>
        </package>
        <package name="kernel-debug-devel" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">5cf24af3906cbb516ef1018ffb16e66e73be6314643b98ac0b74d5d5e19e6b0c</sum>
        </package>
        <package name="rv" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>rv-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">625f043b57eb0be92308f7c59bcea51b33b49423f09784fb6f70b5f31ddcf9de</sum>
        </package>
        <package name="python3-perf" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>python3-perf-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">7de30c3140a63c58bb3cdcf63bc1860074ace4ee449c43ad87479848292d1945</sum>
        </package>
        <package name="kernel-64k-debug-devel" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">afee7e9f67bed13a7f9cece2c52a855db623d94afc1f2835aff328e0cd1454e1</sum>
        </package>
        <package name="rtla" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>rtla-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">be889cd20331646c18d2ecc6c31aa4cb6f8078201665dd68d0a68e8a046bcd2d</sum>
        </package>
        <package name="kernel-64k-devel" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c8226c39b5fb8b3183607bdfbd21c615c3750421fc23e972d36c9af110cf4bbe</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-matched-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c9a3828b2e2d97e355b4004c4afaecc2b138ba42a2747ef0af2d1e4536d57978</sum>
        </package>
        <package name="kernel-devel" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-devel-6.12.0-124.20.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">cff3c797a8ff1a5591544df4867266025b582e5a720bbb1125dfc21f6d810480</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23008</id>
    <title>Moderate: mysql8.4 security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-12 10:13:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.  

Security Fix(es):  

  * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
  * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23008" id="RHSA-2025:23008" type="rhsa" title="RHSA-2025:23008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53040" id="CVE-2025-53040" type="cve" title="CVE-2025-53040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53042" id="CVE-2025-53042" type="cve" title="CVE-2025-53042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53044" id="CVE-2025-53044" type="cve" title="CVE-2025-53044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53045" id="CVE-2025-53045" type="cve" title="CVE-2025-53045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53053" id="CVE-2025-53053" type="cve" title="CVE-2025-53053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53054" id="CVE-2025-53054" type="cve" title="CVE-2025-53054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53062" id="CVE-2025-53062" type="cve" title="CVE-2025-53062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53069" id="CVE-2025-53069" type="cve" title="CVE-2025-53069"/>
      <reference href="https://bugzilla.redhat.com/2405486" id="2405486" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405491" id="2405491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405511" id="2405511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405514" id="2405514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405523" id="2405523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405534" id="2405534" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405541" id="2405541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405544" id="2405544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23008.html" id="ALSA-2025:23008" type="self" title="ALSA-2025:23008"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="mysql8.4-libs" version="8.4.7" release="1.el10_1" epoch="0" arch="aarch64" src="mysql8.4-8.4.7-1.el10_1.src.rpm">
          <filename>mysql8.4-libs-8.4.7-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">3f0e817fdd6599cea249af6e9ab41f4f68bd34d906753421935c361b914fde3a</sum>
        </package>
        <package name="mysql8.4-common" version="8.4.7" release="1.el10_1" epoch="0" arch="noarch" src="mysql8.4-8.4.7-1.el10_1.src.rpm">
          <filename>mysql8.4-common-8.4.7-1.el10_1.noarch.rpm</filename>
          <sum type="sha256">4851fa098552b216259e4bac1f3d688e691b1cef2acc8eb212b78f778bda8183</sum>
        </package>
        <package name="mysql8.4-server" version="8.4.7" release="1.el10_1" epoch="0" arch="aarch64" src="mysql8.4-8.4.7-1.el10_1.src.rpm">
          <filename>mysql8.4-server-8.4.7-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">bafc2e72e2c71cb76ca07c6e481716d1909e596fd73b653cfe56beb7928f5987</sum>
        </package>
        <package name="mysql8.4" version="8.4.7" release="1.el10_1" epoch="0" arch="aarch64" src="mysql8.4-8.4.7-1.el10_1.src.rpm">
          <filename>mysql8.4-8.4.7-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c7da16857089e890fa65129229cda25ffe701a530c618f901c06986cf17251b5</sum>
        </package>
        <package name="mysql8.4-errmsg" version="8.4.7" release="1.el10_1" epoch="0" arch="noarch" src="mysql8.4-8.4.7-1.el10_1.src.rpm">
          <filename>mysql8.4-errmsg-8.4.7-1.el10_1.noarch.rpm</filename>
          <sum type="sha256">d5da935f2a26a96b2bd0a66767512b2cca946026ba5f068bd70a304fcd579121</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23035</id>
    <title>Important: firefox security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-12 10:16:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>firefox security update</summary>
    <description>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  

Security Fix(es):  

  * firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333)
  * firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329)
  * firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331)
  * firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23035" id="RHSA-2025:23035" type="rhsa" title="RHSA-2025:23035"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14321" id="CVE-2025-14321" type="cve" title="CVE-2025-14321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14322" id="CVE-2025-14322" type="cve" title="CVE-2025-14322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14323" id="CVE-2025-14323" type="cve" title="CVE-2025-14323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14324" id="CVE-2025-14324" type="cve" title="CVE-2025-14324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14325" id="CVE-2025-14325" type="cve" title="CVE-2025-14325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14328" id="CVE-2025-14328" type="cve" title="CVE-2025-14328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14329" id="CVE-2025-14329" type="cve" title="CVE-2025-14329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14330" id="CVE-2025-14330" type="cve" title="CVE-2025-14330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14331" id="CVE-2025-14331" type="cve" title="CVE-2025-14331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14333" id="CVE-2025-14333" type="cve" title="CVE-2025-14333"/>
      <reference href="https://bugzilla.redhat.com/2420502" id="2420502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420503" id="2420503" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420504" id="2420504" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420506" id="2420506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420508" id="2420508" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420509" id="2420509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420512" id="2420512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420513" id="2420513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420516" id="2420516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420517" id="2420517" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23035.html" id="ALSA-2025:23035" type="self" title="ALSA-2025:23035"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="firefox" version="140.6.0" release="1.el10_1" epoch="0" arch="aarch64" src="firefox-140.6.0-1.el10_1.src.rpm">
          <filename>firefox-140.6.0-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">5acd681a35151bb79043d52d45989fa7514a8b05d65a4137284ce7f73c522a32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23050</id>
    <title>Important: tomcat security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-17 11:40:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat security update</summary>
    <description>Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.  

Security Fix(es):  

  * tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
  * tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service (CVE-2025-61795)
  * tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23050" id="RHSA-2025:23050" type="rhsa" title="RHSA-2025:23050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31651" id="CVE-2025-31651" type="cve" title="CVE-2025-31651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55752" id="CVE-2025-55752" type="cve" title="CVE-2025-55752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61795" id="CVE-2025-61795" type="cve" title="CVE-2025-61795"/>
      <reference href="https://bugzilla.redhat.com/2362782" id="2362782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406588" id="2406588" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406591" id="2406591" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23050.html" id="ALSA-2025:23050" type="self" title="ALSA-2025:23050"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="tomcat-jsp-3.1-api" version="10.1.36" release="3.el10_1.1" epoch="1" arch="noarch" src="tomcat-10.1.36-3.el10_1.1.src.rpm">
          <filename>tomcat-jsp-3.1-api-10.1.36-3.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">01dada388b365d0eb45976174f1471e01a1ee8284359bbcae29bb412878121f5</sum>
        </package>
        <package name="tomcat" version="10.1.36" release="3.el10_1.1" epoch="1" arch="noarch" src="tomcat-10.1.36-3.el10_1.1.src.rpm">
          <filename>tomcat-10.1.36-3.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">07a55d764e26d9e004d70fc379fef7418209de1477face99db96b619960aa7d6</sum>
        </package>
        <package name="tomcat-admin-webapps" version="10.1.36" release="3.el10_1.1" epoch="1" arch="noarch" src="tomcat-10.1.36-3.el10_1.1.src.rpm">
          <filename>tomcat-admin-webapps-10.1.36-3.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">21f3f37c3745d8423496c727fcb04f0a8fa2ad26004e198354ce33048b22ba8a</sum>
        </package>
        <package name="tomcat-servlet-6.0-api" version="10.1.36" release="3.el10_1.1" epoch="1" arch="noarch" src="tomcat-10.1.36-3.el10_1.1.src.rpm">
          <filename>tomcat-servlet-6.0-api-10.1.36-3.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">29a540da8e70157a499d70f2c3096c7a71c293bf352100e44e8968ff05af0205</sum>
        </package>
        <package name="tomcat-webapps" version="10.1.36" release="3.el10_1.1" epoch="1" arch="noarch" src="tomcat-10.1.36-3.el10_1.1.src.rpm">
          <filename>tomcat-webapps-10.1.36-3.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">29dabddd6a274fa0409110a277087f21f2967f7b066c8597e7bddd8dbaba1ab8</sum>
        </package>
        <package name="tomcat-el-5.0-api" version="10.1.36" release="3.el10_1.1" epoch="1" arch="noarch" src="tomcat-10.1.36-3.el10_1.1.src.rpm">
          <filename>tomcat-el-5.0-api-10.1.36-3.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">5a868b537dc45b4c0aadf3689d391d23076c36eef971fc36b61f0280ee5be2e3</sum>
        </package>
        <package name="tomcat-lib" version="10.1.36" release="3.el10_1.1" epoch="1" arch="noarch" src="tomcat-10.1.36-3.el10_1.1.src.rpm">
          <filename>tomcat-lib-10.1.36-3.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">98d17d674d7a9f674cc2c4b857bce28c7c7b538392c8cb496bdcd26e3de8c761</sum>
        </package>
        <package name="tomcat-docs-webapp" version="10.1.36" release="3.el10_1.1" epoch="1" arch="noarch" src="tomcat-10.1.36-3.el10_1.1.src.rpm">
          <filename>tomcat-docs-webapp-10.1.36-3.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">a860665fa635eac62ac3410f7015395051c79855afd2d87fcbbfed263a2fe7db</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23052</id>
    <title>Important: tomcat9 security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-17 11:36:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tomcat9 security update</summary>
    <description>Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.  

Security Fix(es):  

  * tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)
  * tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23052" id="RHSA-2025:23052" type="rhsa" title="RHSA-2025:23052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-31651" id="CVE-2025-31651" type="cve" title="CVE-2025-31651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55752" id="CVE-2025-55752" type="cve" title="CVE-2025-55752"/>
      <reference href="https://bugzilla.redhat.com/2362782" id="2362782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406591" id="2406591" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23052.html" id="ALSA-2025:23052" type="self" title="ALSA-2025:23052"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="tomcat9-jsp-2.3-api" version="9.0.87" release="8.el10_1.1" epoch="1" arch="noarch" src="tomcat9-9.0.87-8.el10_1.1.src.rpm">
          <filename>tomcat9-jsp-2.3-api-9.0.87-8.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">06b9ffb04a18b2c62901d425e1a577f385bdbb5f3dca4fb05a64c0a05b8917cb</sum>
        </package>
        <package name="tomcat9-el-3.0-api" version="9.0.87" release="8.el10_1.1" epoch="1" arch="noarch" src="tomcat9-9.0.87-8.el10_1.1.src.rpm">
          <filename>tomcat9-el-3.0-api-9.0.87-8.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">1835f0bc3ca9b3201e899a9e8d7801418412d8651d0b502ce2d0f19e62c6b063</sum>
        </package>
        <package name="tomcat9-servlet-4.0-api" version="9.0.87" release="8.el10_1.1" epoch="1" arch="noarch" src="tomcat9-9.0.87-8.el10_1.1.src.rpm">
          <filename>tomcat9-servlet-4.0-api-9.0.87-8.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">44e7a8721279cb2fff33fdf94aae06088663ef8b818471da1389b9216a066586</sum>
        </package>
        <package name="tomcat9-lib" version="9.0.87" release="8.el10_1.1" epoch="1" arch="noarch" src="tomcat9-9.0.87-8.el10_1.1.src.rpm">
          <filename>tomcat9-lib-9.0.87-8.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">5fbb9c0ce4fb1f0f3c001cd13ba638bde0f0f6cbaaf11fe7c9e4a88c4b669bc6</sum>
        </package>
        <package name="tomcat9" version="9.0.87" release="8.el10_1.1" epoch="1" arch="noarch" src="tomcat9-9.0.87-8.el10_1.1.src.rpm">
          <filename>tomcat9-9.0.87-8.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">bbc04103b9f730b9ed20d3c6b9089fb5c015604ea2815e2e78a339d2e9b17104</sum>
        </package>
        <package name="tomcat9-admin-webapps" version="9.0.87" release="8.el10_1.1" epoch="1" arch="noarch" src="tomcat9-9.0.87-8.el10_1.1.src.rpm">
          <filename>tomcat9-admin-webapps-9.0.87-8.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">d12b701fa61c7e1d606284dcc6feb6ec7b957679be81aa5ba3a8fceb2e320fe0</sum>
        </package>
        <package name="tomcat9-webapps" version="9.0.87" release="8.el10_1.1" epoch="1" arch="noarch" src="tomcat9-9.0.87-8.el10_1.1.src.rpm">
          <filename>tomcat9-webapps-9.0.87-8.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">d267a9c403d045721056b9f62d6d5a58e8d3aa3e524d568d19eb12345e211daf</sum>
        </package>
        <package name="tomcat9-docs-webapp" version="9.0.87" release="8.el10_1.1" epoch="1" arch="noarch" src="tomcat9-9.0.87-8.el10_1.1.src.rpm">
          <filename>tomcat9-docs-webapp-9.0.87-8.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">f626d6d4f19cb1b6ba26ac4fa47d563ace20bd4439b1d5b4d4f55d7d6d7ccd4c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23083</id>
    <title>Important: wireshark security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-12 10:17:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.  

Security Fix(es):  

  * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23083" id="RHSA-2025:23083" type="rhsa" title="RHSA-2025:23083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13499" id="CVE-2025-13499" type="cve" title="CVE-2025-13499"/>
      <reference href="https://bugzilla.redhat.com/2416293" id="2416293" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23083.html" id="ALSA-2025:23083" type="self" title="ALSA-2025:23083"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="wireshark" version="4.4.2" release="4.el10_1.1" epoch="1" arch="aarch64" src="wireshark-4.4.2-4.el10_1.1.src.rpm">
          <filename>wireshark-4.4.2-4.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">6c4e8c890df28fc1bc2ff37e372be6ea004c53dfec703f535c5d60187f51f9e9</sum>
        </package>
        <package name="wireshark-cli" version="4.4.2" release="4.el10_1.1" epoch="1" arch="aarch64" src="wireshark-4.4.2-4.el10_1.1.src.rpm">
          <filename>wireshark-cli-4.4.2-4.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">cfb8e5d482a9171afa40aacd20f5c84e8a89f9765bda71a1290cab84ee94809a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23088</id>
    <title>Moderate: grafana security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:18:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grafana security update</summary>
    <description>Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &amp; OpenTSDB.   

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23088" id="RHSA-2025:23088" type="rhsa" title="RHSA-2025:23088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23088.html" id="ALSA-2025:23088" type="self" title="ALSA-2025:23088"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="grafana" version="10.2.6" release="21.el10_1" epoch="0" arch="aarch64" src="grafana-10.2.6-21.el10_1.src.rpm">
          <filename>grafana-10.2.6-21.el10_1.aarch64.rpm</filename>
          <sum type="sha256">5fbbe70a27c8a1b1e9f4537782373e02019aef5851ba3f85b0d13f1d8e47be9d</sum>
        </package>
        <package name="grafana-selinux" version="10.2.6" release="21.el10_1" epoch="0" arch="aarch64" src="grafana-10.2.6-21.el10_1.src.rpm">
          <filename>grafana-selinux-10.2.6-21.el10_1.aarch64.rpm</filename>
          <sum type="sha256">d8c7000300e12a47dcd9285dedae032626af6c68064fa224a2879226131977d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23139</id>
    <title>Moderate: libsoup3 security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:26:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion (CVE-2025-12105)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23139" id="RHSA-2025:23139" type="rhsa" title="RHSA-2025:23139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12105" id="CVE-2025-12105" type="cve" title="CVE-2025-12105"/>
      <reference href="https://bugzilla.redhat.com/2405992" id="2405992" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23139.html" id="ALSA-2025:23139" type="self" title="ALSA-2025:23139"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="libsoup3-devel" version="3.6.5" release="3.el10_1.7" epoch="0" arch="aarch64" src="libsoup3-3.6.5-3.el10_1.7.src.rpm">
          <filename>libsoup3-devel-3.6.5-3.el10_1.7.aarch64.rpm</filename>
          <sum type="sha256">67d45f4d123d3909b98d89842b8cc41b63469e732d2f0a01f211b945e60fe1e4</sum>
        </package>
        <package name="libsoup3" version="3.6.5" release="3.el10_1.7" epoch="0" arch="aarch64" src="libsoup3-3.6.5-3.el10_1.7.src.rpm">
          <filename>libsoup3-3.6.5-3.el10_1.7.aarch64.rpm</filename>
          <sum type="sha256">d200ab8526de9a5f97c956864004a75198fa01f45770ea2710d2d1a2d1fa0581</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23141</id>
    <title>Moderate: ruby security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2026-01-05 20:34:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * resolv: Denial of Service in resolv gem (CVE-2025-24294)
  * rexml: REXML denial of service (CVE-2025-58767)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23141" id="RHSA-2025:23141" type="rhsa" title="RHSA-2025:23141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24294" id="CVE-2025-24294" type="cve" title="CVE-2025-24294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58767" id="CVE-2025-58767" type="cve" title="CVE-2025-58767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61594" id="CVE-2025-61594" type="cve" title="CVE-2025-61594"/>
      <reference href="https://bugzilla.redhat.com/2379684" id="2379684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396186" id="2396186" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23141.html" id="ALSA-2025:23141" type="self" title="ALSA-2025:23141"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="rubygems" version="3.5.22" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygems-3.5.22-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">0666fdab28a0e965384919259f9630b0f11b3475f24ec8939ea58c8003c85cf6</sum>
        </package>
        <package name="rubygem-minitest" version="5.20.0" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-minitest-5.20.0-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">070874f4e2e655f63af68ae3885b9ad4255fa451cc0d31890aac36758b7d7e3b</sum>
        </package>
        <package name="rubygem-bigdecimal" version="3.1.5" release="11.el10_1" epoch="0" arch="aarch64" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-bigdecimal-3.1.5-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">0d614985a433afe4e2276485830ffb1ab939653a8af88088dc816d767e9b5f48</sum>
        </package>
        <package name="ruby-default-gems" version="3.3.10" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>ruby-default-gems-3.3.10-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">16b6b44625ccfbc83f54d67bc3ad5da2037d33024c83b43af79deb9373f2fa1f</sum>
        </package>
        <package name="rubygem-io-console" version="0.7.1" release="11.el10_1" epoch="0" arch="aarch64" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-io-console-0.7.1-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">1ce087fb3e0ae8bc2165e7efe7d8b6a43ff8dc1a2a16ddb54ac1f199eac5ceed</sum>
        </package>
        <package name="ruby-devel" version="3.3.10" release="11.el10_1" epoch="0" arch="aarch64" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>ruby-devel-3.3.10-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">275b8e1cf630f0ba260bb493e7eb662571b416818b289f9807abdd5d879abe11</sum>
        </package>
        <package name="rubygem-rexml" version="3.4.4" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-rexml-3.4.4-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">30963cfa37fdcc96d9747db3162d8dfc9e99c21ab2893378a00a2a35d7a9cd0a</sum>
        </package>
        <package name="rubygem-rbs" version="3.4.0" release="11.el10_1" epoch="0" arch="aarch64" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-rbs-3.4.0-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">3550b129af11620118c70955ac2b5548c4b972c065f3db902c3ffa02c6e4621d</sum>
        </package>
        <package name="ruby-libs" version="3.3.10" release="11.el10_1" epoch="0" arch="aarch64" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>ruby-libs-3.3.10-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">4d4799f9bb6df1f9fd6d38795f03335f0e08e1aa8d1a4c8d5438e952936402a0</sum>
        </package>
        <package name="rubygem-rake" version="13.1.0" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-rake-13.1.0-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">5f505877ee66db3ae64cd7863a62fbd47a230f8117422f6088a929c748b11f54</sum>
        </package>
        <package name="rubygem-rss" version="0.3.1" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-rss-0.3.1-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">60428acd0b2cd43b81c368fa5757ec8f8e4db8d1d9a8e1f863f6d1594a6ddeba</sum>
        </package>
        <package name="rubygem-psych" version="5.1.2" release="11.el10_1" epoch="0" arch="aarch64" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-psych-5.1.2-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">7892652e3b39cb07bfdf1be7677c87ace74e83662e92c96f9b664af881359987</sum>
        </package>
        <package name="rubygem-json" version="2.7.2" release="11.el10_1" epoch="0" arch="aarch64" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-json-2.7.2-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">7981ecdfd1a375459cea6961f49cd958652ed15824c2f0a0b3d2a703ce76a469</sum>
        </package>
        <package name="rubygem-typeprof" version="0.21.9" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-typeprof-0.21.9-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">8cb5fb479f86a92c73eed9b437c3540cd4f1a2f89359413b4c242c1fe245fd12</sum>
        </package>
        <package name="rubygem-test-unit" version="3.6.1" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-test-unit-3.6.1-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">976e34171b1b9fea97e4cd4b5b76706e88610a0c6ff18364f5d6af4384d34dc8</sum>
        </package>
        <package name="rubygems-devel" version="3.5.22" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygems-devel-3.5.22-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">a09749caf52d7e04775771a6909ce2568838cd0f893ce267816ee624d4faa564</sum>
        </package>
        <package name="ruby-bundled-gems" version="3.3.10" release="11.el10_1" epoch="0" arch="aarch64" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>ruby-bundled-gems-3.3.10-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">a0e167ca5c6bc86b389d0be8dd9b793add7439f9b443ae534e9aa5aa09783372</sum>
        </package>
        <package name="rubygem-rdoc" version="6.6.3.1" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-rdoc-6.6.3.1-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">c1304c47957c90c846da1f97aa135006f36f5dcf6476b8e4dc7ed8d5a98d5044</sum>
        </package>
        <package name="rubygem-bundler" version="2.5.22" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-bundler-2.5.22-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">cb029511f250a94dade1e7478f54dc6ddb7010756eb4d23d3c4a7f7595dca679</sum>
        </package>
        <package name="rubygem-power_assert" version="2.0.3" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-power_assert-2.0.3-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">d787064ace04ce54101cccc8e174ae56ae5580c24560dc26921a9b9346fe5bcf</sum>
        </package>
        <package name="ruby" version="3.3.10" release="11.el10_1" epoch="0" arch="aarch64" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>ruby-3.3.10-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">e3301b195d3297b87b6afb9948dce0bfd67e6b81a8b71d4fae9aeb93e9484a08</sum>
        </package>
        <package name="rubygem-irb" version="1.13.1" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-irb-1.13.1-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">edbd64b0073068dbdf1e23e0f69f980079b189af9b889fdbf710e1b044ea0349</sum>
        </package>
        <package name="rubygem-racc" version="1.7.3" release="11.el10_1" epoch="0" arch="aarch64" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>rubygem-racc-1.7.3-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">f2d0454b87714c8d0fc0c853f90770a12d216f60dad0f95638fed7cbd9057b21</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23201</id>
    <title>Important: keylime security update</title>
    <issued date="2025-12-15 00:00:00"/>
    <updated date="2025-12-22 14:00:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>keylime security update</summary>
    <description>Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution.  

Security Fix(es):  

  * keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration (CVE-2025-13609)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23201" id="RHSA-2025:23201" type="rhsa" title="RHSA-2025:23201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13609" id="CVE-2025-13609" type="cve" title="CVE-2025-13609"/>
      <reference href="https://bugzilla.redhat.com/2416761" id="2416761" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23201.html" id="ALSA-2025:23201" type="self" title="ALSA-2025:23201"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="keylime-registrar" version="7.12.1" release="11.el10_1.3" epoch="0" arch="aarch64" src="keylime-7.12.1-11.el10_1.3.src.rpm">
          <filename>keylime-registrar-7.12.1-11.el10_1.3.aarch64.rpm</filename>
          <sum type="sha256">388eb5769ace8b87c773d3995f9d7c1be462e080a800626af1e1cdf1066843d6</sum>
        </package>
        <package name="keylime-tools" version="7.12.1" release="11.el10_1.3" epoch="0" arch="aarch64" src="keylime-7.12.1-11.el10_1.3.src.rpm">
          <filename>keylime-tools-7.12.1-11.el10_1.3.aarch64.rpm</filename>
          <sum type="sha256">5074b5f8ccc65e2f9253cc1be3a0332bc839b50cf9e11fd8cae9159c944e2cc7</sum>
        </package>
        <package name="keylime-tenant" version="7.12.1" release="11.el10_1.3" epoch="0" arch="aarch64" src="keylime-7.12.1-11.el10_1.3.src.rpm">
          <filename>keylime-tenant-7.12.1-11.el10_1.3.aarch64.rpm</filename>
          <sum type="sha256">7c4dbc12d5a97fffae4969c0209b66cd996fe0b36d58a970da74178a4c699378</sum>
        </package>
        <package name="keylime-selinux" version="7.12.1" release="11.el10_1.3" epoch="0" arch="noarch" src="keylime-7.12.1-11.el10_1.3.src.rpm">
          <filename>keylime-selinux-7.12.1-11.el10_1.3.noarch.rpm</filename>
          <sum type="sha256">9200de1488e886431e194553acf7ed1f7561e94a2f18732900f254047f1cf9da</sum>
        </package>
        <package name="keylime-base" version="7.12.1" release="11.el10_1.3" epoch="0" arch="aarch64" src="keylime-7.12.1-11.el10_1.3.src.rpm">
          <filename>keylime-base-7.12.1-11.el10_1.3.aarch64.rpm</filename>
          <sum type="sha256">99f2e574308499fd78409fa7ea0d5a050b24794ba251f36439818c182247028f</sum>
        </package>
        <package name="keylime" version="7.12.1" release="11.el10_1.3" epoch="0" arch="aarch64" src="keylime-7.12.1-11.el10_1.3.src.rpm">
          <filename>keylime-7.12.1-11.el10_1.3.aarch64.rpm</filename>
          <sum type="sha256">c3bcf68b939980286efcd61d2090667b8eb4ec5f3b94a98792ab58b44e843ee9</sum>
        </package>
        <package name="python3-keylime" version="7.12.1" release="11.el10_1.3" epoch="0" arch="aarch64" src="keylime-7.12.1-11.el10_1.3.src.rpm">
          <filename>python3-keylime-7.12.1-11.el10_1.3.aarch64.rpm</filename>
          <sum type="sha256">c46ba97fe1e11c77b10b529d2b152b8e32bf98596426a7e3addce4136b892bf1</sum>
        </package>
        <package name="keylime-verifier" version="7.12.1" release="11.el10_1.3" epoch="0" arch="aarch64" src="keylime-7.12.1-11.el10_1.3.src.rpm">
          <filename>keylime-verifier-7.12.1-11.el10_1.3.aarch64.rpm</filename>
          <sum type="sha256">d9bcb2860635d10f33f2466aa670cdccb0be48d2cc1b8c26dc6fd9a60380613b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23279</id>
    <title>Important: kernel security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2026-01-05 20:25:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499)
  * kernel: net: tun: Update napi-&gt;skb after XDP process (CVE-2025-39984)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23279" id="RHSA-2025:23279" type="rhsa" title="RHSA-2025:23279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38499" id="CVE-2025-38499" type="cve" title="CVE-2025-38499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39984" id="CVE-2025-39984" type="cve" title="CVE-2025-39984"/>
      <reference href="https://bugzilla.redhat.com/2387670" id="2387670" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404111" id="2404111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23279.html" id="ALSA-2025:23279" type="self" title="ALSA-2025:23279"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="kernel-64k-devel-matched" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-matched-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">0d792ca5dde73fb2b72bd76f41ae5326b2b233f9a1edcc05e292606b92fef6e9</sum>
        </package>
        <package name="perf" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>perf-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">104a7f02bc996f5392a8c142219fdc31d6ce56ce20c6d840f5a5806e88115ee6</sum>
        </package>
        <package name="kernel-64k-debug-devel" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">2732811765cf8993b06a0ab3f595a5c6689ebd0bf4268d028af41ca028ae29e5</sum>
        </package>
        <package name="kernel-64k-devel" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">31098212e8aa57440dbeae4d57e2d1af7bd032aaff7ba3c6e072b352c8ed79ed</sum>
        </package>
        <package name="kernel-debug-devel" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">41fdd47b6181dd4def4791c242e9ba6711f3d4504036cd2e420d22c83f4091f2</sum>
        </package>
        <package name="rtla" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>rtla-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">82e2453455ecc9bf362935fb92f9312d4f31c2c4dcbeffa79968ac9521d08e32</sum>
        </package>
        <package name="kernel-devel" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-devel-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">8d8a6dedb60a470dbdf03a269004ffe7747a5fbb74a165d7eade49641c8f2bc1</sum>
        </package>
        <package name="python3-perf" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>python3-perf-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">9dc8f402bc0b0fc6cf7c11e2a2d4e1a8736d05cf0bae03ffd8e939f7af3c87fc</sum>
        </package>
        <package name="rv" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>rv-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">a48ecab1c3c8e0c8a30b3dbda037894c752ed19d8f3e25e57fb70a6f252e4357</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-matched-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">b1ebb472b71dd2ae7d6e07c79eacdaf113e89b90f451d74168c23a143ea2bb20</sum>
        </package>
        <package name="kernel-headers" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-headers-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">de4afdc296873f2950ca5758e798c2b52d74221a28b3a69885876c24e5e25ed6</sum>
        </package>
        <package name="kernel-64k-debug-devel-matched" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-matched-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">e95ce8eaa59795dfb95c945d425d60707fa1a70503416a5da759f26e6626c527</sum>
        </package>
        <package name="kernel-devel-matched" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-devel-matched-6.12.0-124.21.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">f11412ff18bb5d2eee62b350a58d0947a116b6973d2e0bb4b0d5f8751f62b0b0</sum>
        </package>
        <package name="kernel-doc" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-doc-6.12.0-124.21.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">fd6d37ee95da0c96f3dae7783386e15d05cb53b3907a98c7f328493dc523d021</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23294</id>
    <title>Moderate: skopeo security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:59:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>skopeo security update</summary>
    <description>The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.   

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23294" id="RHSA-2025:23294" type="rhsa" title="RHSA-2025:23294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23294.html" id="ALSA-2025:23294" type="self" title="ALSA-2025:23294"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="skopeo" version="1.20.0" release="2.el10_1" epoch="2" arch="aarch64" src="skopeo-1.20.0-2.el10_1.src.rpm">
          <filename>skopeo-1.20.0-2.el10_1.aarch64.rpm</filename>
          <sum type="sha256">20e41d0352cd7284bcd95de29705ecd5406e6ab81ecd3db6e78bdf476543e1a5</sum>
        </package>
        <package name="skopeo-tests" version="1.20.0" release="2.el10_1" epoch="2" arch="aarch64" src="skopeo-1.20.0-2.el10_1.src.rpm">
          <filename>skopeo-tests-1.20.0-2.el10_1.aarch64.rpm</filename>
          <sum type="sha256">5f8caff4d288841668c2d4afea0b8d1d30565de30052dfd6696240ae214353a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23295</id>
    <title>Moderate: podman security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:57:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23295" id="RHSA-2025:23295" type="rhsa" title="RHSA-2025:23295"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23295.html" id="ALSA-2025:23295" type="self" title="ALSA-2025:23295"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="podman" version="5.6.0" release="8.el10_1" epoch="7" arch="aarch64" src="podman-5.6.0-8.el10_1.src.rpm">
          <filename>podman-5.6.0-8.el10_1.aarch64.rpm</filename>
          <sum type="sha256">225f85b42ebff01b8e472aa1ee181024152749dfcffb3f0e8dca06f5f968806c</sum>
        </package>
        <package name="podman-docker" version="5.6.0" release="8.el10_1" epoch="7" arch="noarch" src="podman-5.6.0-8.el10_1.src.rpm">
          <filename>podman-docker-5.6.0-8.el10_1.noarch.rpm</filename>
          <sum type="sha256">a8111837588d0b366be1dd2a00578887e34316c4f7c925b966dcdb439ae46662</sum>
        </package>
        <package name="podman-remote" version="5.6.0" release="8.el10_1" epoch="7" arch="aarch64" src="podman-5.6.0-8.el10_1.src.rpm">
          <filename>podman-remote-5.6.0-8.el10_1.aarch64.rpm</filename>
          <sum type="sha256">ccf4a113ba7deaeb6d834d2db1250682bfd8fe9e97e5eac8f0fcd6caec56a5b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23306</id>
    <title>Moderate: binutils security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:58:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.  

Security Fix(es):  

  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11082)
  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23306" id="RHSA-2025:23306" type="rhsa" title="RHSA-2025:23306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11082" id="CVE-2025-11082" type="cve" title="CVE-2025-11082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11083" id="CVE-2025-11083" type="cve" title="CVE-2025-11083"/>
      <reference href="https://bugzilla.redhat.com/2399943" id="2399943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2399948" id="2399948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23306.html" id="ALSA-2025:23306" type="self" title="ALSA-2025:23306"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="binutils-devel" version="2.41" release="58.el10_1.2.alma.1" epoch="0" arch="aarch64" src="binutils-2.41-58.el10_1.2.alma.1.src.rpm">
          <filename>binutils-devel-2.41-58.el10_1.2.alma.1.aarch64.rpm</filename>
          <sum type="sha256">7e1cba8fe9df5520f11d8302ab8f7c62f29043f8b8cb7b9e352541655f32dd62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23479</id>
    <title>Moderate: openssh security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-21 20:05:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984)
  * openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23479" id="RHSA-2025:23479" type="rhsa" title="RHSA-2025:23479"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61984" id="CVE-2025-61984" type="cve" title="CVE-2025-61984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61985" id="CVE-2025-61985" type="cve" title="CVE-2025-61985"/>
      <reference href="https://bugzilla.redhat.com/2401960" id="2401960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401962" id="2401962" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23479.html" id="ALSA-2025:23479" type="self" title="ALSA-2025:23479"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="openssh-keysign" version="9.9p1" release="12.el10_1.alma.1" epoch="0" arch="aarch64" src="openssh-9.9p1-12.el10_1.alma.1.src.rpm">
          <filename>openssh-keysign-9.9p1-12.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">cc3b6be0f344d5f9c023657d2e547b49f49492e2e90ffecdf8324a915d3ce406</sum>
        </package>
        <package name="openssh-askpass" version="9.9p1" release="12.el10_1.alma.1" epoch="0" arch="aarch64" src="openssh-9.9p1-12.el10_1.alma.1.src.rpm">
          <filename>openssh-askpass-9.9p1-12.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">d63e9e30502660805a22254484f0c2c84ccbc5e0c4b898b5fe5afbaaa28831f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23484</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-21 19:50:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend (CVE-2025-5987)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23484" id="RHSA-2025:23484" type="rhsa" title="RHSA-2025:23484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5987" id="CVE-2025-5987" type="cve" title="CVE-2025-5987"/>
      <reference href="https://bugzilla.redhat.com/2376219" id="2376219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23484.html" id="ALSA-2025:23484" type="self" title="ALSA-2025:23484"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="libssh-devel" version="0.11.1" release="5.el10_1" epoch="0" arch="aarch64" src="libssh-0.11.1-5.el10_1.src.rpm">
          <filename>libssh-devel-0.11.1-5.el10_1.aarch64.rpm</filename>
          <sum type="sha256">dd34383d8b57d5c63e2ec92fce5178f1f34062585bd900f707ba27e009c3ed28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23664</id>
    <title>Important: opentelemetry-collector security update</title>
    <issued date="2025-12-18 00:00:00"/>
    <updated date="2025-12-23 13:09:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>opentelemetry-collector security update</summary>
    <description>Collector with the supported components for a AlmaLinux build of OpenTelemetry  

Security Fix(es):  

  * github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation (CVE-2025-68156)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23664" id="RHSA-2025:23664" type="rhsa" title="RHSA-2025:23664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68156" id="CVE-2025-68156" type="cve" title="CVE-2025-68156"/>
      <reference href="https://bugzilla.redhat.com/2422891" id="2422891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23664.html" id="ALSA-2025:23664" type="self" title="ALSA-2025:23664"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="opentelemetry-collector" version="0.135.0" release="2.el10_1" epoch="0" arch="aarch64" src="opentelemetry-collector-0.135.0-2.el10_1.src.rpm">
          <filename>opentelemetry-collector-0.135.0-2.el10_1.aarch64.rpm</filename>
          <sum type="sha256">626f5ea71e71f0522d4cc8ac02cb118d796f65c726a3433c1703fbb8ed67178b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23667</id>
    <title>Important: git-lfs security update</title>
    <issued date="2025-12-18 00:00:00"/>
    <updated date="2025-12-22 13:42:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>git-lfs security update</summary>
    <description>Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  

Security Fix(es):  

  * git-lfs: Git LFS may write to arbitrary files via crafted symlinks (CVE-2025-26625)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23667" id="RHSA-2025:23667" type="rhsa" title="RHSA-2025:23667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26625" id="CVE-2025-26625" type="cve" title="CVE-2025-26625"/>
      <reference href="https://bugzilla.redhat.com/2404720" id="2404720" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23667.html" id="ALSA-2025:23667" type="self" title="ALSA-2025:23667"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="git-lfs" version="3.6.1" release="4.el10_1" epoch="0" arch="aarch64" src="git-lfs-3.6.1-4.el10_1.src.rpm">
          <filename>git-lfs-3.6.1-4.el10_1.aarch64.rpm</filename>
          <sum type="sha256">0be6e212dad5987b2263c0dea5eabb0fda04f85d1548d329f3407559aad3fc55</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23738</id>
    <title>Important: mod_md security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-22 13:38:35"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mod_md security update</summary>
    <description>This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal.  

Security Fix(es):  

  * mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23738" id="RHSA-2025:23738" type="rhsa" title="RHSA-2025:23738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55753" id="CVE-2025-55753" type="cve" title="CVE-2025-55753"/>
      <reference href="https://bugzilla.redhat.com/2419140" id="2419140" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23738.html" id="ALSA-2025:23738" type="self" title="ALSA-2025:23738"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="mod_md" version="2.4.26" release="4.el10_1" epoch="1" arch="aarch64" src="mod_md-2.4.26-4.el10_1.src.rpm">
          <filename>mod_md-2.4.26-4.el10_1.aarch64.rpm</filename>
          <sum type="sha256">ebfea913baea70e3107e9da94d0c9642a6f9cb71049af72dd52a089d4653e327</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23932</id>
    <title>Important: httpd security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-23 06:01:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>httpd security update</summary>
    <description>The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  

Security Fix(es):  

  * httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
  * httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)
  * httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23932" id="RHSA-2025:23932" type="rhsa" title="RHSA-2025:23932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58098" id="CVE-2025-58098" type="cve" title="CVE-2025-58098"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65082" id="CVE-2025-65082" type="cve" title="CVE-2025-65082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66200" id="CVE-2025-66200" type="cve" title="CVE-2025-66200"/>
      <reference href="https://bugzilla.redhat.com/2419139" id="2419139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419262" id="2419262" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419365" id="2419365" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23932.html" id="ALSA-2025:23932" type="self" title="ALSA-2025:23932"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="httpd-core" version="2.4.63" release="4.el10_1.3" epoch="0" arch="aarch64" src="httpd-2.4.63-4.el10_1.3.src.rpm">
          <filename>httpd-core-2.4.63-4.el10_1.3.aarch64.rpm</filename>
          <sum type="sha256">66736009297b5ee9ae9fef242942a141d8ff0da5f82e2a46a8ff27b588e3beb3</sum>
        </package>
        <package name="httpd" version="2.4.63" release="4.el10_1.3" epoch="0" arch="aarch64" src="httpd-2.4.63-4.el10_1.3.src.rpm">
          <filename>httpd-2.4.63-4.el10_1.3.aarch64.rpm</filename>
          <sum type="sha256">8c212f401a3f9204e69eea656e1e25ae8670dad1c3d5a9f8c986586c8fb8f4ec</sum>
        </package>
        <package name="httpd-devel" version="2.4.63" release="4.el10_1.3" epoch="0" arch="aarch64" src="httpd-2.4.63-4.el10_1.3.src.rpm">
          <filename>httpd-devel-2.4.63-4.el10_1.3.aarch64.rpm</filename>
          <sum type="sha256">97e0e2428ace7c1d1213bb693b3be5ad223b2e5b385b93f73558ed249a237355</sum>
        </package>
        <package name="httpd-filesystem" version="2.4.63" release="4.el10_1.3" epoch="0" arch="noarch" src="httpd-2.4.63-4.el10_1.3.src.rpm">
          <filename>httpd-filesystem-2.4.63-4.el10_1.3.noarch.rpm</filename>
          <sum type="sha256">f320ff587a4fcd09a925bec9c40e35d269b63143948e6d12c7074adaa47577f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23940</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-23 05:59:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23940" id="RHSA-2025:23940" type="rhsa" title="RHSA-2025:23940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23940.html" id="ALSA-2025:23940" type="self" title="ALSA-2025:23940"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="python-unversioned-command" version="3.12.12" release="1.el10_1" epoch="0" arch="noarch" src="python3.12-3.12.12-1.el10_1.src.rpm">
          <filename>python-unversioned-command-3.12.12-1.el10_1.noarch.rpm</filename>
          <sum type="sha256">77e9dff6b56693802c9371ff9bba54b8619f1220a1681566bb081f0bb2593153</sum>
        </package>
        <package name="python3-tkinter" version="3.12.12" release="1.el10_1" epoch="0" arch="aarch64" src="python3.12-3.12.12-1.el10_1.src.rpm">
          <filename>python3-tkinter-3.12.12-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">9552b79b43df5d4aaba3a9a1abff3e94beb41579ea5ac4b541e423ea1f167e6a</sum>
        </package>
        <package name="python3-devel" version="3.12.12" release="1.el10_1" epoch="0" arch="aarch64" src="python3.12-3.12.12-1.el10_1.src.rpm">
          <filename>python3-devel-3.12.12-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">b728fe94f5576e7f63272e444b8dd1c722dfcd2da4e5f77964488247c94fb459</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0025</id>
    <title>Important: thunderbird security update</title>
    <issued date="2026-01-05 00:00:00"/>
    <updated date="2026-01-05 10:10:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>thunderbird security update</summary>
    <description>Mozilla Thunderbird is a standalone mail and newsgroup client.  

Security Fix(es):  

  * firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333)
  * firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325)
  * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328)
  * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329)
  * firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331)
  * firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330)
  * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0025" id="RHSA-2026:0025" type="rhsa" title="RHSA-2026:0025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14321" id="CVE-2025-14321" type="cve" title="CVE-2025-14321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14322" id="CVE-2025-14322" type="cve" title="CVE-2025-14322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14323" id="CVE-2025-14323" type="cve" title="CVE-2025-14323"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14324" id="CVE-2025-14324" type="cve" title="CVE-2025-14324"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14325" id="CVE-2025-14325" type="cve" title="CVE-2025-14325"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14328" id="CVE-2025-14328" type="cve" title="CVE-2025-14328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14329" id="CVE-2025-14329" type="cve" title="CVE-2025-14329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14330" id="CVE-2025-14330" type="cve" title="CVE-2025-14330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14331" id="CVE-2025-14331" type="cve" title="CVE-2025-14331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14333" id="CVE-2025-14333" type="cve" title="CVE-2025-14333"/>
      <reference href="https://bugzilla.redhat.com/2420502" id="2420502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420503" id="2420503" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420504" id="2420504" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420506" id="2420506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420508" id="2420508" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420509" id="2420509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420512" id="2420512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420513" id="2420513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420516" id="2420516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420517" id="2420517" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0025.html" id="ALSA-2026:0025" type="self" title="ALSA-2026:0025"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="thunderbird" version="140.6.0" release="1.el10_1.alma.1" epoch="0" arch="aarch64" src="thunderbird-140.6.0-1.el10_1.alma.1.src.rpm">
          <filename>thunderbird-140.6.0-1.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">b342a98f901745db6bb1a7b15ba6f6d6767ece7cc39ac81a04c524afcc9f45a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0108</id>
    <title>Moderate: gcc-toolset-15-binutils security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:17:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc-toolset-15-binutils security update</summary>
    <description>Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line).  

Security Fix(es):  

  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0108" id="RHSA-2026:0108" type="rhsa" title="RHSA-2026:0108"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11083" id="CVE-2025-11083" type="cve" title="CVE-2025-11083"/>
      <reference href="https://bugzilla.redhat.com/2399948" id="2399948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0108.html" id="ALSA-2026:0108" type="self" title="ALSA-2026:0108"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="gcc-toolset-15-binutils-gold" version="2.44" release="7.el10_1.1" epoch="0" arch="aarch64" src="gcc-toolset-15-binutils-2.44-7.el10_1.1.src.rpm">
          <filename>gcc-toolset-15-binutils-gold-2.44-7.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">485d959b6db1f1be7349a106642306ae0435d61a563aade20c05fd077fc21bfc</sum>
        </package>
        <package name="gcc-toolset-15-binutils" version="2.44" release="7.el10_1.1" epoch="0" arch="aarch64" src="gcc-toolset-15-binutils-2.44-7.el10_1.1.src.rpm">
          <filename>gcc-toolset-15-binutils-2.44-7.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">7dfa98580a02b324c3da1d72570e2e9f2ec889eb748039f2c213edbbc271a8dd</sum>
        </package>
        <package name="gcc-toolset-15-binutils-devel" version="2.44" release="7.el10_1.1" epoch="0" arch="aarch64" src="gcc-toolset-15-binutils-2.44-7.el10_1.1.src.rpm">
          <filename>gcc-toolset-15-binutils-devel-2.44-7.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">90a9feaa82c7b6e6f68eddda8142e8683b45bfb99fddd971186bf04f06b0a6a1</sum>
        </package>
        <package name="gcc-toolset-15-binutils-gprofng" version="2.44" release="7.el10_1.1" epoch="0" arch="aarch64" src="gcc-toolset-15-binutils-2.44-7.el10_1.1.src.rpm">
          <filename>gcc-toolset-15-binutils-gprofng-2.44-7.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">fe3ef175bde25138372a7f7434038f38989cab0de5101c601440e85b3d960e68</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0128</id>
    <title>Moderate: poppler security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:29:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0128" id="RHSA-2026:0128" type="rhsa" title="RHSA-2026:0128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32365" id="CVE-2025-32365" type="cve" title="CVE-2025-32365"/>
      <reference href="https://bugzilla.redhat.com/2357656" id="2357656" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0128.html" id="ALSA-2026:0128" type="self" title="ALSA-2026:0128"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="poppler" version="24.02.0" release="7.el10_1" epoch="0" arch="aarch64" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-24.02.0-7.el10_1.aarch64.rpm</filename>
          <sum type="sha256">12bbcb044f2f3909bc0c0633f20a2942189a4a12f5a454bd3fed989af4b3a2c9</sum>
        </package>
        <package name="poppler-utils" version="24.02.0" release="7.el10_1" epoch="0" arch="aarch64" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-utils-24.02.0-7.el10_1.aarch64.rpm</filename>
          <sum type="sha256">2100a47b328a720aa8e9a17d56aa51af292ac72d5ac1678ab3c1a199d2d7e0a0</sum>
        </package>
        <package name="poppler-cpp" version="24.02.0" release="7.el10_1" epoch="0" arch="aarch64" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-cpp-24.02.0-7.el10_1.aarch64.rpm</filename>
          <sum type="sha256">69cee9b67ec209776e2a32363323a4a0c13917cb729cbcb93a0e3b6a8e5b6cd9</sum>
        </package>
        <package name="poppler-glib" version="24.02.0" release="7.el10_1" epoch="0" arch="aarch64" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-glib-24.02.0-7.el10_1.aarch64.rpm</filename>
          <sum type="sha256">72e24324cb1d19d9c814d8d260ac31402fa741c27ccc170a556fcb70608a3288</sum>
        </package>
        <package name="poppler-qt6" version="24.02.0" release="7.el10_1" epoch="0" arch="aarch64" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-qt6-24.02.0-7.el10_1.aarch64.rpm</filename>
          <sum type="sha256">90b7595595c9286fd2b3e68802ff182ed3fa611292ef94aa1dcdd02e2340861c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0136</id>
    <title>Important: mariadb10.11 security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-12 10:55:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mariadb10.11 security update</summary>
    <description>MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.  

Security Fix(es):  

  * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
  * mariadb: MariaDB Server Crash (CVE-2023-52971)
  * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
  * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
  * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
  * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0136" id="RHSA-2026:0136" type="rhsa" title="RHSA-2026:0136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52969" id="CVE-2023-52969" type="cve" title="CVE-2023-52969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52970" id="CVE-2023-52970" type="cve" title="CVE-2023-52970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52971" id="CVE-2023-52971" type="cve" title="CVE-2023-52971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13699" id="CVE-2025-13699" type="cve" title="CVE-2025-13699"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21490" id="CVE-2025-21490" type="cve" title="CVE-2025-21490"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30693" id="CVE-2025-30693" type="cve" title="CVE-2025-30693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30722" id="CVE-2025-30722" type="cve" title="CVE-2025-30722"/>
      <reference href="https://bugzilla.redhat.com/2339221" id="2339221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350916" id="2350916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350917" id="2350917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350918" id="2350918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359885" id="2359885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359963" id="2359963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2417693" id="2417693" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0136.html" id="ALSA-2026:0136" type="self" title="ALSA-2026:0136"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="mariadb" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">05355294898da3837edb151bd26bd337b02fd4f8163bc1310f286f157ce4d36b</sum>
        </package>
        <package name="mariadb-common" version="10.11.15" release="1.el10_1" epoch="3" arch="noarch" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-common-10.11.15-1.el10_1.noarch.rpm</filename>
          <sum type="sha256">153fe9f1c23236efb58a1e7983dea6a0eb9aede1d0002cd78d5c211536e0389a</sum>
        </package>
        <package name="mariadb-devel" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-devel-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">17ec6efd1bd81049fc44652e51ff28c6971492b78c44b2d2b4fc309a54c94885</sum>
        </package>
        <package name="mariadb-embedded-devel" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-embedded-devel-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">1ab417fdbc1b45eac07e4fcb99b422e1316f9b89a8304760683c966ca9c8dc5a</sum>
        </package>
        <package name="mariadb-embedded" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-embedded-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">26d36f095a5f639b5427f440053043a0c353cb1a66afc754ebf2559df3696e08</sum>
        </package>
        <package name="mariadb-oqgraph-engine" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-oqgraph-engine-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">28fb0bb773029b71f3ce13a08bc534d54ae590ed06a4771fae0f0859a41ba68b</sum>
        </package>
        <package name="mariadb-server" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-server-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">306c6c3d029beed8c07bd3096ab173047fd454b7c8210a84c2ef5831077991ed</sum>
        </package>
        <package name="mariadb-server-galera" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-server-galera-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">353de93fdd3810a979a358efb1d05eb17dc59795528eebae67d3db41cd3e8ea4</sum>
        </package>
        <package name="mariadb-backup" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-backup-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">a51d995d43aee4ebda3d8a02d50ddd181c9eaae138d157c6ef688755061ac53d</sum>
        </package>
        <package name="mariadb-pam" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-pam-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">b51ae993052372afa210bf18e5818cd13ec03257597ca7d0481ab5be4c3255a1</sum>
        </package>
        <package name="mariadb-errmsg" version="10.11.15" release="1.el10_1" epoch="3" arch="noarch" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-errmsg-10.11.15-1.el10_1.noarch.rpm</filename>
          <sum type="sha256">d28b3121d08b7ce6d511e8704415c0874db79cb7efbf67eb85e565cec6a23c71</sum>
        </package>
        <package name="mariadb-server-utils" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-server-utils-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">d96d0b70dacf17fb5fd3998e9d81c11f4be471967e3eb2ff9bee7f52f6bb0ea7</sum>
        </package>
        <package name="mariadb-client-utils" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-client-utils-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">ec2c6643dd520040bac5b5601bf180d526d712e61f3a9c9339dff933fb84e13b</sum>
        </package>
        <package name="mariadb-test" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-test-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">ecf95309f81bcf725de713cde11d4ed1c5ea844784674d7988316d742cbc01ce</sum>
        </package>
        <package name="mariadb-gssapi-server" version="10.11.15" release="1.el10_1" epoch="3" arch="aarch64" src="mariadb10.11-10.11.15-1.el10_1.src.rpm">
          <filename>mariadb-gssapi-server-10.11.15-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">f25f7f82bf6decc98726b1063b6cddbb8efb29f1d4fb7c8f1887e69d35d8e9e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0237</id>
    <title>Important: libpng security update</title>
    <issued date="2026-01-07 00:00:00"/>
    <updated date="2026-01-07 21:38:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpng security update</summary>
    <description>The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files.  

Security Fix(es):  

  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)
  * libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0237" id="RHSA-2026:0237" type="rhsa" title="RHSA-2026:0237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66293" id="CVE-2025-66293" type="cve" title="CVE-2025-66293"/>
      <reference href="https://bugzilla.redhat.com/2416904" id="2416904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416907" id="2416907" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418711" id="2418711" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0237.html" id="ALSA-2026:0237" type="self" title="ALSA-2026:0237"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="libpng-devel" version="1.6.40" release="8.el10_1.1" epoch="2" arch="aarch64" src="libpng-1.6.40-8.el10_1.1.src.rpm">
          <filename>libpng-devel-1.6.40-8.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">eb980d0311672ec9296453b22e702d1cc653bcec1be8ea6f4a9b5895f71d7253</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0423</id>
    <title>Important: libsoup3 security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:49:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins) (CVE-2025-14523)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0423" id="RHSA-2026:0423" type="rhsa" title="RHSA-2026:0423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14523" id="CVE-2025-14523" type="cve" title="CVE-2025-14523"/>
      <reference href="https://bugzilla.redhat.com/2421349" id="2421349" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0423.html" id="ALSA-2026:0423" type="self" title="ALSA-2026:0423"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="libsoup3-devel" version="3.6.5" release="3.el10_1.8" epoch="0" arch="aarch64" src="libsoup3-3.6.5-3.el10_1.8.src.rpm">
          <filename>libsoup3-devel-3.6.5-3.el10_1.8.aarch64.rpm</filename>
          <sum type="sha256">1be2b8ff67dca19063ac05edcdad96a4298879f2e0262765dabcbf7c13a315fd</sum>
        </package>
        <package name="libsoup3" version="3.6.5" release="3.el10_1.8" epoch="0" arch="aarch64" src="libsoup3-3.6.5-3.el10_1.8.src.rpm">
          <filename>libsoup3-3.6.5-3.el10_1.8.aarch64.rpm</filename>
          <sum type="sha256">d89a098c53b268c151937d4349ff04534104f25cf600f65ffa94bff2f5b89612</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0436</id>
    <title>Important: buildah security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:50:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>buildah security update</summary>
    <description>The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   

Security Fix(es):  

  * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0436" id="RHSA-2026:0436" type="rhsa" title="RHSA-2026:0436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47913" id="CVE-2025-47913" type="cve" title="CVE-2025-47913"/>
      <reference href="https://bugzilla.redhat.com/2414943" id="2414943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0436.html" id="ALSA-2026:0436" type="self" title="ALSA-2026:0436"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="buildah-tests" version="1.41.8" release="1.el10_1" epoch="2" arch="aarch64" src="buildah-1.41.8-1.el10_1.src.rpm">
          <filename>buildah-tests-1.41.8-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">767c78f4c4f7cd0789f3069c3da51590ae815e5d8cc44765e2dc8efe625ecf6b</sum>
        </package>
        <package name="buildah" version="1.41.8" release="1.el10_1" epoch="2" arch="aarch64" src="buildah-1.41.8-1.el10_1.src.rpm">
          <filename>buildah-1.41.8-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">8d85040c917512a88da4c04214c812fdd76fb1d227ed9e7717e0b67162a12839</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0453</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:27:00"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)
  * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840)
  * kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843)
  * kernel: net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CVE-2025-39905)
  * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)
  * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)
  * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)
  * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)
  * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0453" id="RHSA-2026:0453" type="rhsa" title="RHSA-2026:0453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39806" id="CVE-2025-39806" type="cve" title="CVE-2025-39806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39840" id="CVE-2025-39840" type="cve" title="CVE-2025-39840"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39843" id="CVE-2025-39843" type="cve" title="CVE-2025-39843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39905" id="CVE-2025-39905" type="cve" title="CVE-2025-39905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39966" id="CVE-2025-39966" type="cve" title="CVE-2025-39966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40176" id="CVE-2025-40176" type="cve" title="CVE-2025-40176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40240" id="CVE-2025-40240" type="cve" title="CVE-2025-40240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40277" id="CVE-2025-40277" type="cve" title="CVE-2025-40277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68287" id="CVE-2025-68287" type="cve" title="CVE-2025-68287"/>
      <reference href="https://bugzilla.redhat.com/2395807" id="2395807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396936" id="2396936" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396941" id="2396941" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400611" id="2400611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404107" id="2404107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414524" id="2414524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418832" id="2418832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419954" id="2419954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422788" id="2422788" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0453.html" id="ALSA-2026:0453" type="self" title="ALSA-2026:0453"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="kernel-debug-devel-matched" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-matched-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">01dab5a303a65a47531ef75009d194d8c57b8be81bb0560629899eff7189e2a0</sum>
        </package>
        <package name="kernel-doc" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-doc-6.12.0-124.27.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">0770a8559ca9123d89de794268ba43aefea78ecb00a58d74d3db0e55ca2c4ef9</sum>
        </package>
        <package name="kernel-debug-devel" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">0fef87418c680a83c86ed5a850dd3f409cb5e4b1929ffcf3909ecd779db01dd7</sum>
        </package>
        <package name="rv" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>rv-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">10d87a6924b2a991853a9af12ebfb4c824d3a7b52d295a683124d79875058c3c</sum>
        </package>
        <package name="rtla" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>rtla-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">2d51f8000952e86a95f6aab1562d9d0be68c6645c8f9ecece83866813ad43edb</sum>
        </package>
        <package name="kernel-64k-debug-devel-matched" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-matched-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">2f4c69fce2073d83ac4175c1d6e7b9d02d6ee08e96903353dcae81b6c052b5ba</sum>
        </package>
        <package name="perf" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>perf-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">3e8ff663fc2cc519311924503606b5ac3f3051779e36e720df7aa18eb035bebd</sum>
        </package>
        <package name="kernel-devel" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-devel-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">3fefdd9699cfe7b8111d287f551512c549b178b6d33b7a286b4d37264031c828</sum>
        </package>
        <package name="kernel-64k-devel" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">414eec8d692bd99c771a7e2b5de746bcb15b186c95eeb6d091b4d22067f407c2</sum>
        </package>
        <package name="kernel-64k-debug-devel" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">5071246dc2b0cdd5f0aee88961ad49107f232b6a21473316a945394efc7d0439</sum>
        </package>
        <package name="kernel-devel-matched" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-devel-matched-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">52bf5d9a748eb97d901675a943dc591dcbd6b214d1facc2cbef7e961d83b38f5</sum>
        </package>
        <package name="kernel-headers" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-headers-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">92266ff62681118da7a831ee8d266d63efa52a6df688ecaa3fb8366656795fc7</sum>
        </package>
        <package name="python3-perf" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>python3-perf-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">924f8be5c50a8306135f647b40e76d60ffef40da0eb9e1741cf01ee7184691fa</sum>
        </package>
        <package name="kernel-64k-devel-matched" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-matched-6.12.0-124.27.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">bbd12a596b3823ad05a39d2abd957fd540e9c44c78a4392996744f9a67005ff7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0464</id>
    <title>Moderate: cups security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:20:45"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915)
  * cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0464" id="RHSA-2026:0464" type="rhsa" title="RHSA-2026:0464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58436" id="CVE-2025-58436" type="cve" title="CVE-2025-58436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61915" id="CVE-2025-61915" type="cve" title="CVE-2025-61915"/>
      <reference href="https://bugzilla.redhat.com/2416039" id="2416039" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416040" id="2416040" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0464.html" id="ALSA-2026:0464" type="self" title="ALSA-2026:0464"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="cups-client" version="2.4.10" release="12.el10_1.2" epoch="1" arch="aarch64" src="cups-2.4.10-12.el10_1.2.src.rpm">
          <filename>cups-client-2.4.10-12.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">1628afbc951dc52a03ed5ff80bb4e61e2c451a605804ca6a20c35a0ae42bdd52</sum>
        </package>
        <package name="cups-printerapp" version="2.4.10" release="12.el10_1.2" epoch="1" arch="aarch64" src="cups-2.4.10-12.el10_1.2.src.rpm">
          <filename>cups-printerapp-2.4.10-12.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">353afe93167263ebd23285f2b5aae4a7a67b051d70e1f6b80daf1d6cfac7172c</sum>
        </package>
        <package name="cups-devel" version="2.4.10" release="12.el10_1.2" epoch="1" arch="aarch64" src="cups-2.4.10-12.el10_1.2.src.rpm">
          <filename>cups-devel-2.4.10-12.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">4a4b98bf553dbb25807febe1526604ace68dcc33e8b89d3c8577c4feac91a3b6</sum>
        </package>
        <package name="cups" version="2.4.10" release="12.el10_1.2" epoch="1" arch="aarch64" src="cups-2.4.10-12.el10_1.2.src.rpm">
          <filename>cups-2.4.10-12.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">a64e0524453e0f75fdfd66cccbc71419a28b97678e8528727f0c84712be82169</sum>
        </package>
        <package name="cups-ipptool" version="2.4.10" release="12.el10_1.2" epoch="1" arch="aarch64" src="cups-2.4.10-12.el10_1.2.src.rpm">
          <filename>cups-ipptool-2.4.10-12.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">ab38941e644e191e3206f6b8946a43a4788bc6acc4fd2dd0399b3b5c2f006af2</sum>
        </package>
        <package name="cups-lpd" version="2.4.10" release="12.el10_1.2" epoch="1" arch="aarch64" src="cups-2.4.10-12.el10_1.2.src.rpm">
          <filename>cups-lpd-2.4.10-12.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">dd9c2d4187474166e129669adc8e80d6cad6c83a98d44157c55d5cf1be741a7c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0525</id>
    <title>Moderate: postgresql16 security update</title>
    <issued date="2026-01-13 00:00:00"/>
    <updated date="2026-01-16 15:06:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql16 security update</summary>
    <description>PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.  

Security Fix(es):  

  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0525" id="RHSA-2026:0525" type="rhsa" title="RHSA-2026:0525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414825" id="2414825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0525.html" id="ALSA-2026:0525" type="self" title="ALSA-2026:0525"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="postgresql-static" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-static-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">06f5943f95135ac642bed1ea5862c8142b978d0b03f0d4a2135f74635e71a05a</sum>
        </package>
        <package name="postgresql-upgrade" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-upgrade-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">28484f23a3e882e2a09fd3c1bd77b2e5f8f8f5dc359ff291ae4570b2fff4b990</sum>
        </package>
        <package name="postgresql-server" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-server-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">326867a99e9fe8b9e55f547c886e821a79c32206b6ae26433881fe54ab2dcc92</sum>
        </package>
        <package name="postgresql" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">554b8fcaea29ec2017f48e6f5e45514fb8ba79062584b8028eb359723e527ffa</sum>
        </package>
        <package name="postgresql-upgrade-devel" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-upgrade-devel-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">625c41c954625b958c1d6152db31e6f81dc0fab2ae49cca9a5a50141efb4c1fe</sum>
        </package>
        <package name="postgresql-docs" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-docs-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">66debad78942d0e19767dbe83be3102f6a0ec672f7329257f9971024797c7945</sum>
        </package>
        <package name="postgresql-contrib" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-contrib-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">6d5ef6dad9feca287a4503ce830a2dedb4ca9651b206552ae83faf022055164f</sum>
        </package>
        <package name="postgresql-plperl" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-plperl-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">764798fad4b482ee45010f36bfab598987eecce15b88eb6ff7ae590f2ea71780</sum>
        </package>
        <package name="postgresql-private-devel" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-private-devel-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">bf8475a362b627a6af2b9bc519ef1c4b423012a3549126278b078efe8b02fc2d</sum>
        </package>
        <package name="postgresql-pltcl" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-pltcl-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">bfadbfe921b4ad794745377481caa9e0fa14db54933594966f61508fc9ba3c8c</sum>
        </package>
        <package name="postgresql-test" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-test-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">bfed97d045ec9b4e51c9cfbb56e13fa59fd8c36571750757c3e1bbb173854d89</sum>
        </package>
        <package name="postgresql-plpython3" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-plpython3-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c2a74403e0e192cc687978604d7740866a80cc73547eb1a483a2ccad4e7a10e7</sum>
        </package>
        <package name="postgresql-private-libs" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-private-libs-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">e0e8c94bd233d615e5baca544c8fd45e87e4ade0c84bc4c75da7660b532cc6ec</sum>
        </package>
        <package name="postgresql-server-devel" version="16.11" release="1.el10_1" epoch="0" arch="aarch64" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-server-devel-16.11-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">fb08d0673b5f6a1e81712f1f1ac2a848b06f70e9618cfd7b2b3009c50dd63896</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0545</id>
    <title>Important: podman security update</title>
    <issued date="2026-01-14 00:00:00"/>
    <updated date="2026-01-16 15:04:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0545" id="RHSA-2026:0545" type="rhsa" title="RHSA-2026:0545"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47913" id="CVE-2025-47913" type="cve" title="CVE-2025-47913"/>
      <reference href="https://bugzilla.redhat.com/2414943" id="2414943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0545.html" id="ALSA-2026:0545" type="self" title="ALSA-2026:0545"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="podman" version="5.6.0" release="11.el10_1" epoch="7" arch="aarch64" src="podman-5.6.0-11.el10_1.src.rpm">
          <filename>podman-5.6.0-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">ddd52474212528ab8950b330a7eed5e2ce8c5e22ca1a8a5f64594fb1d23bd2ff</sum>
        </package>
        <package name="podman-docker" version="5.6.0" release="11.el10_1" epoch="7" arch="noarch" src="podman-5.6.0-11.el10_1.src.rpm">
          <filename>podman-docker-5.6.0-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">e17fbb834043bdebf1c43bb09952f1b7772d8901f8de634dd02b3db58210dd27</sum>
        </package>
        <package name="podman-remote" version="5.6.0" release="11.el10_1" epoch="7" arch="aarch64" src="podman-5.6.0-11.el10_1.src.rpm">
          <filename>podman-remote-5.6.0-11.el10_1.aarch64.rpm</filename>
          <sum type="sha256">ffbafcecd29f60083bc7a8a7ea41c0621a564d573c2894d468228172dfc197ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0594</id>
    <title>Moderate: libpq security update</title>
    <issued date="2026-01-14 00:00:00"/>
    <updated date="2026-01-16 15:02:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libpq security update</summary>
    <description>The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.   

Security Fix(es):  

  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0594" id="RHSA-2026:0594" type="rhsa" title="RHSA-2026:0594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0594.html" id="ALSA-2026:0594" type="self" title="ALSA-2026:0594"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="libpq-devel" version="16.11" release="3.el10_1" epoch="0" arch="aarch64" src="libpq-16.11-3.el10_1.src.rpm">
          <filename>libpq-devel-16.11-3.el10_1.aarch64.rpm</filename>
          <sum type="sha256">6aa3ae8b9e0a0a3af44becea00d0abcf76dd585222dee398a1fea644ac321ed9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0606</id>
    <title>Moderate: vsftpd security update</title>
    <issued date="2026-01-14 00:00:00"/>
    <updated date="2026-01-16 14:56:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vsftpd security update</summary>
    <description>The vsftpd packages include a Very Secure File Transfer Protocol (FTP) daemon, which is used to serve files over a network.  

Security Fix(es):  

  * vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing (CVE-2025-14242)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0606" id="RHSA-2026:0606" type="rhsa" title="RHSA-2026:0606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14242" id="CVE-2025-14242" type="cve" title="CVE-2025-14242"/>
      <reference href="https://bugzilla.redhat.com/2419826" id="2419826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0606.html" id="ALSA-2026:0606" type="self" title="ALSA-2026:0606"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="vsftpd" version="3.0.5" release="10.el10_1.1" epoch="0" arch="aarch64" src="vsftpd-3.0.5-10.el10_1.1.src.rpm">
          <filename>vsftpd-3.0.5-10.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">7812fb889c320feadd3990a27ad75a6a002ffab23dc9d2fc1f7be8c06e1e3f01</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0668</id>
    <title>Important: net-snmp security update</title>
    <issued date="2026-01-15 00:00:00"/>
    <updated date="2026-01-16 14:53:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>net-snmp security update</summary>
    <description>The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser.  

Security Fix(es):  

  * net-snmp: buffer overflow via a specially crafted packet can cause a crash in snmptrapd (CVE-2025-68615)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0668" id="RHSA-2026:0668" type="rhsa" title="RHSA-2026:0668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68615" id="CVE-2025-68615" type="cve" title="CVE-2025-68615"/>
      <reference href="https://bugzilla.redhat.com/2424618" id="2424618" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0668.html" id="ALSA-2026:0668" type="self" title="ALSA-2026:0668"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="net-snmp-devel" version="5.9.4" release="15.el10_1.2" epoch="1" arch="aarch64" src="net-snmp-5.9.4-15.el10_1.2.src.rpm">
          <filename>net-snmp-devel-5.9.4-15.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">2496b60eb5daa86f8b7ec466cf3b50a98e26eab20cf2fef00636690a86c298bc</sum>
        </package>
        <package name="net-snmp-libs" version="5.9.4" release="15.el10_1.2" epoch="1" arch="aarch64" src="net-snmp-5.9.4-15.el10_1.2.src.rpm">
          <filename>net-snmp-libs-5.9.4-15.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">25591a33602ffd717b7c968619021a556a023bc97dc126e3e0892facc67c59e7</sum>
        </package>
        <package name="python3-net-snmp" version="5.9.4" release="15.el10_1.2" epoch="1" arch="aarch64" src="net-snmp-5.9.4-15.el10_1.2.src.rpm">
          <filename>python3-net-snmp-5.9.4-15.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">2c1253da585389b6a09d4e410918385d5b913dd0032f7a6ac3ba4fde63d8d85a</sum>
        </package>
        <package name="net-snmp-agent-libs" version="5.9.4" release="15.el10_1.2" epoch="1" arch="aarch64" src="net-snmp-5.9.4-15.el10_1.2.src.rpm">
          <filename>net-snmp-agent-libs-5.9.4-15.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">5248667f5a739470c1c882d5c5321fb88b628cfa145de9a62b106455741a907e</sum>
        </package>
        <package name="net-snmp-utils" version="5.9.4" release="15.el10_1.2" epoch="1" arch="aarch64" src="net-snmp-5.9.4-15.el10_1.2.src.rpm">
          <filename>net-snmp-utils-5.9.4-15.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">82a9dea76b62c4c6bf0fb55b5de9a1dce725207c301e80a914b63eb9f9891796</sum>
        </package>
        <package name="net-snmp-perl" version="5.9.4" release="15.el10_1.2" epoch="1" arch="aarch64" src="net-snmp-5.9.4-15.el10_1.2.src.rpm">
          <filename>net-snmp-perl-5.9.4-15.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">a8efc9736c49431ffcea555582bfe91a724fee5a274f1bfd483ca8112697a120</sum>
        </package>
        <package name="net-snmp-perl-module" version="5.9.4" release="15.el10_1.2" epoch="1" arch="aarch64" src="net-snmp-5.9.4-15.el10_1.2.src.rpm">
          <filename>net-snmp-perl-module-5.9.4-15.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">d05c030d2d6f1c88b2903cc0ce204546b019ffcb297b89f5e74601bbc64c9dea</sum>
        </package>
        <package name="net-snmp" version="5.9.4" release="15.el10_1.2" epoch="1" arch="aarch64" src="net-snmp-5.9.4-15.el10_1.2.src.rpm">
          <filename>net-snmp-5.9.4-15.el10_1.2.aarch64.rpm</filename>
          <sum type="sha256">e6449783b01c2f462b28373c864bf6e9086fe073d425ecfba53f21892be25ed4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0697</id>
    <title>Important: gnupg2 security update</title>
    <issued date="2026-01-15 00:00:00"/>
    <updated date="2026-01-16 08:52:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gnupg2 security update</summary>
    <description>The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.  

Security Fix(es):  

  * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0697" id="RHSA-2026:0697" type="rhsa" title="RHSA-2026:0697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68973" id="CVE-2025-68973" type="cve" title="CVE-2025-68973"/>
      <reference href="https://bugzilla.redhat.com/2425966" id="2425966" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0697.html" id="ALSA-2026:0697" type="self" title="ALSA-2026:0697"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="gnupg2-smime" version="2.4.5" release="3.el10_1" epoch="0" arch="aarch64" src="gnupg2-2.4.5-3.el10_1.src.rpm">
          <filename>gnupg2-smime-2.4.5-3.el10_1.aarch64.rpm</filename>
          <sum type="sha256">ec8b947b041f12d522d68ce9ce9445a959e3408ee3a0079154c9f0d3c42462bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0770</id>
    <title>Important: gpsd security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-21 10:46:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gpsd security update</summary>
    <description>gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications (such as navigational and war-driving software) can share access to a GPS without contention or loss of data. Also, gpsd responds to queries with a format that is substantially easier to parse than NMEA 0183.  

Security Fix(es):  

  * gpsd: gpsd: Denial of Service due to malformed NAVCOM packet parsing (CVE-2025-67269)
  * gpsd: gpsd: Arbitrary code execution via heap-based out-of-bounds write in NMEA2000 packet handling (CVE-2025-67268)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0770" id="RHSA-2026:0770" type="rhsa" title="RHSA-2026:0770"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-67268" id="CVE-2025-67268" type="cve" title="CVE-2025-67268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-67269" id="CVE-2025-67269" type="cve" title="CVE-2025-67269"/>
      <reference href="https://bugzilla.redhat.com/2426810" id="2426810" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426835" id="2426835" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0770.html" id="ALSA-2026:0770" type="self" title="ALSA-2026:0770"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="gpsd" version="3.26.1" release="1.el10_1.1" epoch="1" arch="aarch64" src="gpsd-3.26.1-1.el10_1.1.src.rpm">
          <filename>gpsd-3.26.1-1.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">190a883d2462b30c0432c207dcbc1101251a335b98910f366bf30c2f4f05ae21</sum>
        </package>
        <package name="gpsd-clients" version="3.26.1" release="1.el10_1.1" epoch="1" arch="aarch64" src="gpsd-3.26.1-1.el10_1.1.src.rpm">
          <filename>gpsd-clients-3.26.1-1.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">68d793c7d64fc6d411cbc24035d04cec6d792043812c2bf647d2191a889f39af</sum>
        </package>
        <package name="python3-gpsd" version="3.26.1" release="1.el10_1.1" epoch="1" arch="aarch64" src="gpsd-3.26.1-1.el10_1.1.src.rpm">
          <filename>python3-gpsd-3.26.1-1.el10_1.1.aarch64.rpm</filename>
          <sum type="sha256">c08b551ba17532cb165fffc6a75127ffb175ce666a9f7c515f355251d39733e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0786</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-23 07:53:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0786" id="RHSA-2026:0786" type="rhsa" title="RHSA-2026:0786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68285" id="CVE-2025-68285" type="cve" title="CVE-2025-68285"/>
      <reference href="https://bugzilla.redhat.com/2422801" id="2422801" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0786.html" id="ALSA-2026:0786" type="self" title="ALSA-2026:0786"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="rv" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>rv-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">063e722cd3514b36b8468f2b14cb0d91e3e601ab5bdc4c62c12ac57d8d035486</sum>
        </package>
        <package name="kernel-devel-matched" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-devel-matched-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">2be47804512a6231ddb6ddcdee33437548e155e32be920677252a874296d5170</sum>
        </package>
        <package name="kernel-64k-debug-devel-matched" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-matched-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">3a2f7d462f276a507497a9ab6cd4930288dff5bce9e96d07ffe1dad681c05a5f</sum>
        </package>
        <package name="perf" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>perf-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">3dd196ccf2d12eec25693a4bd548c74687047ed3d6a454dc10db14bf765c41af</sum>
        </package>
        <package name="kernel-debug-devel" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">446d940c82c40e43c71c3fc25ba922b00366b0b599693800b7a832ddd1efea9d</sum>
        </package>
        <package name="rtla" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>rtla-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">4d1f2174f8d406609bc71c2df02059e5b7e718f5b296e2523af50505f108819d</sum>
        </package>
        <package name="kernel-doc" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-doc-6.12.0-124.28.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">5c1f75c094b9f1b556caeb9b5dac47673874bc2d7087e520e39cf8fc386246e7</sum>
        </package>
        <package name="kernel-64k-debug-devel" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">82158943784c251853c4f332a7cfd03660b8b49b4babc93c08534746561cd225</sum>
        </package>
        <package name="kernel-64k-devel-matched" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-matched-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">9a25fdc7f61eb3df38b30b11dc8743aa27275dd24b742895e3e85646106fdfee</sum>
        </package>
        <package name="kernel-64k-devel" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">d9f5e3d3413821058a7503cbde1afaa53590ac3c63d0d7e38b345f6667d66b7b</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-matched-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">e98278be90ccb91fc7fbcf862626981cf9457b730e8d48b65bd0923eab6091c7</sum>
        </package>
        <package name="kernel-headers" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-headers-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">eb1a6448efbfce922d33f65d87824a55351f2be4e47424b49e84555ec942c20b</sum>
        </package>
        <package name="python3-perf" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>python3-perf-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">eea0e05df1765bfd0711e46969da7846661d7e15b3d8b2530acd113eebd05edb</sum>
        </package>
        <package name="kernel-devel" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-devel-6.12.0-124.28.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">f0abe171f60f9b3c52a28757efd6fff015667e156d395b22449c130686b99801</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0845</id>
    <title>Important: brotli security update</title>
    <issued date="2026-01-20 00:00:00"/>
    <updated date="2026-01-21 10:45:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>brotli security update</summary>
    <description>Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.   

Security Fix(es):  

  * Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS (CVE-2025-6176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0845" id="RHSA-2026:0845" type="rhsa" title="RHSA-2026:0845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6176" id="CVE-2025-6176" type="cve" title="CVE-2025-6176"/>
      <reference href="https://bugzilla.redhat.com/2408762" id="2408762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0845.html" id="ALSA-2026:0845" type="self" title="ALSA-2026:0845"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="brotli-devel" version="1.1.0" release="7.el10_1" epoch="0" arch="aarch64" src="brotli-1.1.0-7.el10_1.src.rpm">
          <filename>brotli-devel-1.1.0-7.el10_1.aarch64.rpm</filename>
          <sum type="sha256">6d792c3c9244f7f7a9d1cfdd303d11f67521e95a33a9d5b65ac93697341e1022</sum>
        </package>
        <package name="python3-brotli" version="1.1.0" release="7.el10_1" epoch="0" arch="aarch64" src="brotli-1.1.0-7.el10_1.src.rpm">
          <filename>python3-brotli-1.1.0-7.el10_1.aarch64.rpm</filename>
          <sum type="sha256">765573fd463dc05b467bcfb0a9001897b01b90e2e4445144b3fb1ca79745b45e</sum>
        </package>
        <package name="brotli" version="1.1.0" release="7.el10_1" epoch="0" arch="aarch64" src="brotli-1.1.0-7.el10_1.src.rpm">
          <filename>brotli-1.1.0-7.el10_1.aarch64.rpm</filename>
          <sum type="sha256">7873158f2e14074617551d1256e43f3e448f201b4d1aca5a26eb6ed45f45188e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0922</id>
    <title>Important: golang security update</title>
    <issued date="2026-01-21 00:00:00"/>
    <updated date="2026-01-23 23:39:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>golang security update</summary>
    <description>The golang packages provide the Go programming language compiler.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0922" id="RHSA-2026:0922" type="rhsa" title="RHSA-2026:0922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0922.html" id="ALSA-2026:0922" type="self" title="ALSA-2026:0922"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="golang-misc" version="1.25.5" release="1.el10_1.alma.1" epoch="0" arch="noarch" src="golang-1.25.5-1.el10_1.alma.1.src.rpm">
          <filename>golang-misc-1.25.5-1.el10_1.alma.1.noarch.rpm</filename>
          <sum type="sha256">20598c6e068e54fe4a67cd6ef77b5264debb1ffc204b99a382d9d15b6ec1bfe0</sum>
        </package>
        <package name="golang-src" version="1.25.5" release="1.el10_1.alma.1" epoch="0" arch="noarch" src="golang-1.25.5-1.el10_1.alma.1.src.rpm">
          <filename>golang-src-1.25.5-1.el10_1.alma.1.noarch.rpm</filename>
          <sum type="sha256">6699f5052dcb7d8110f719dbb2c14f659c35bf9ff2210896441b5d4973d209c5</sum>
        </package>
        <package name="go-toolset" version="1.25.5" release="1.el10_1.alma.1" epoch="0" arch="aarch64" src="golang-1.25.5-1.el10_1.alma.1.src.rpm">
          <filename>go-toolset-1.25.5-1.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">8ae3e0cfbf01d833a0a504527d57c22ba5ec0dc59b0c78ce0e9517861df46c76</sum>
        </package>
        <package name="golang-tests" version="1.25.5" release="1.el10_1.alma.1" epoch="0" arch="noarch" src="golang-1.25.5-1.el10_1.alma.1.src.rpm">
          <filename>golang-tests-1.25.5-1.el10_1.alma.1.noarch.rpm</filename>
          <sum type="sha256">a13cd2ebaaddabe5bfb4634d51645836d29d77fc6f2d382844200eda1a83481b</sum>
        </package>
        <package name="golang-docs" version="1.25.5" release="1.el10_1.alma.1" epoch="0" arch="noarch" src="golang-1.25.5-1.el10_1.alma.1.src.rpm">
          <filename>golang-docs-1.25.5-1.el10_1.alma.1.noarch.rpm</filename>
          <sum type="sha256">a1c03804a4490458c9bfa111f0535921c409d4f038a569475b22295299b099e2</sum>
        </package>
        <package name="golang" version="1.25.5" release="1.el10_1.alma.1" epoch="0" arch="aarch64" src="golang-1.25.5-1.el10_1.alma.1.src.rpm">
          <filename>golang-1.25.5-1.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">a3ec186f39e3a3927fec0b9a0df877dfd2365aada6f28c3933e59beb2d338aaf</sum>
        </package>
        <package name="golang-race" version="1.25.5" release="1.el10_1.alma.1" epoch="0" arch="aarch64" src="golang-1.25.5-1.el10_1.alma.1.src.rpm">
          <filename>golang-race-1.25.5-1.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">a4f90b2a6a33722be5020edd992e1b0d73601274183cd87ad4803c0d8f3a7747</sum>
        </package>
        <package name="golang-bin" version="1.25.5" release="1.el10_1.alma.1" epoch="0" arch="aarch64" src="golang-1.25.5-1.el10_1.alma.1.src.rpm">
          <filename>golang-bin-1.25.5-1.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">b854a18e6f8cc04ce02aab2248ee6b557cc4b20dada919531195dcc3dcad3584</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0928</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-23 23:37:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0928" id="RHSA-2026:0928" type="rhsa" title="RHSA-2026:0928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0928.html" id="ALSA-2026:0928" type="self" title="ALSA-2026:0928"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="java-21-openjdk-devel" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-21.0.10.0.7-1.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">115d057b7cc549db1c4c58fd2b9cc697c238c7c49b0b62c0467a85cb4693123e</sum>
        </package>
        <package name="java-21-openjdk-src" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-src-21.0.10.0.7-1.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">11e63608ca9fbaef8dac11fccc0799e5ce09cf19b7cf85aee439330ef5418bda</sum>
        </package>
        <package name="java-21-openjdk-demo" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-21.0.10.0.7-1.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">5a7663ac8488e10b07054a512d4c3a7765db39e307c700e6a1484cacf0fa6b55</sum>
        </package>
        <package name="java-21-openjdk" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-21.0.10.0.7-1.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">7cf91bb180d5eb89d82dac68ca36602ac88439f5dbf4e8575e35d74ea304bd11</sum>
        </package>
        <package name="java-21-openjdk-static-libs" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-21.0.10.0.7-1.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">920bf3bb3977e859cadb04dd0783bbf099c6f1bd2cac9172d50f12c91f9a6a10</sum>
        </package>
        <package name="java-21-openjdk-javadoc" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-21.0.10.0.7-1.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">9e2bba848471271b8b4f0909f2ff8f159b29d7adf7cb2331f00d0abfe14c5980</sum>
        </package>
        <package name="java-21-openjdk-headless" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-21.0.10.0.7-1.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">9fba7b6acbc4cff3acc6230aad282a0179a0d0b9f63a2223cbc162ff7a40f21b</sum>
        </package>
        <package name="java-21-openjdk-jmods" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-21.0.10.0.7-1.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">b733e2fe0d69177f2675e582005350468bebc9603ce2e1b6150e306bf4785f17</sum>
        </package>
        <package name="java-21-openjdk-javadoc-zip" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-javadoc-zip-21.0.10.0.7-1.el10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">bf79cc718c91d43dc11e2faf0bdedc569446b0330d88e8090ed961f4f74055a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0933</id>
    <title>Important: java-25-openjdk security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-28 14:39:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-25-openjdk security update</summary>
    <description>The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0933" id="RHSA-2026:0933" type="rhsa" title="RHSA-2026:0933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0933.html" id="ALSA-2026:0933" type="self" title="ALSA-2026:0933"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="java-25-openjdk-src" version="25.0.2.0.10" release="1.el10" epoch="1" arch="aarch64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-src-25.0.2.0.10-1.el10.aarch64.rpm</filename>
          <sum type="sha256">049b785ee7bf05804e9d3412de65b8b0c8212e3d158749858d32fb93ce00070e</sum>
        </package>
        <package name="java-25-openjdk-demo" version="25.0.2.0.10" release="1.el10" epoch="1" arch="aarch64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-demo-25.0.2.0.10-1.el10.aarch64.rpm</filename>
          <sum type="sha256">507ea9f164bdb3be738f5fcbc86d6f0ba467c240015ef3f30fef4d1fb337d070</sum>
        </package>
        <package name="java-25-openjdk" version="25.0.2.0.10" release="1.el10" epoch="1" arch="aarch64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-25.0.2.0.10-1.el10.aarch64.rpm</filename>
          <sum type="sha256">68243ab69ff6fd0e8fdccac706ab677a8a38bc0566a7a4423fe92eadc6278182</sum>
        </package>
        <package name="java-25-openjdk-devel" version="25.0.2.0.10" release="1.el10" epoch="1" arch="aarch64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-devel-25.0.2.0.10-1.el10.aarch64.rpm</filename>
          <sum type="sha256">686219898cbcb1dceb581bb04e00ab810da8614442b9ffc4c15a3b339771fad8</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter" version="25.0.2.0.10" release="1.el10" epoch="1" arch="aarch64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-25.0.2.0.10-1.el10.aarch64.rpm</filename>
          <sum type="sha256">81deeb59fe9b56bdfeaf0bc4a09f835e5c02868873fea51eb7b184f73de30f8a</sum>
        </package>
        <package name="java-25-openjdk-javadoc" version="25.0.2.0.10" release="1.el10" epoch="1" arch="aarch64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-javadoc-25.0.2.0.10-1.el10.aarch64.rpm</filename>
          <sum type="sha256">bf038ced1b3e45f6d7f8b4cb2c20766d71d9b78f622edafbe59bba24a8d38dfd</sum>
        </package>
        <package name="java-25-openjdk-javadoc-zip" version="25.0.2.0.10" release="1.el10" epoch="1" arch="aarch64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-javadoc-zip-25.0.2.0.10-1.el10.aarch64.rpm</filename>
          <sum type="sha256">c2122f937e0ca76c9ade5a918a200197f625cc41be4266dbd359d9476f028808</sum>
        </package>
        <package name="java-25-openjdk-headless" version="25.0.2.0.10" release="1.el10" epoch="1" arch="aarch64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-headless-25.0.2.0.10-1.el10.aarch64.rpm</filename>
          <sum type="sha256">f6d0f5141286d7f5ee5fbf6ced4fbe6fd4beadb7a8cf48414beeb68b4418fdad</sum>
        </package>
        <package name="java-25-openjdk-jmods" version="25.0.2.0.10" release="1.el10" epoch="1" arch="aarch64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-jmods-25.0.2.0.10-1.el10.aarch64.rpm</filename>
          <sum type="sha256">fdafc89fb5fed62d0561ccd22d1a5b118efcc080784029630f9a48ebedb99c65</sum>
        </package>
        <package name="java-25-openjdk-static-libs" version="25.0.2.0.10" release="1.el10" epoch="1" arch="aarch64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-static-libs-25.0.2.0.10-1.el10.aarch64.rpm</filename>
          <sum type="sha256">febfe7eeaf21fddbedc055e1f8157dd4815709a9cf6512b84a24654165497c08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0975</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-23 23:34:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0975" id="RHSA-2026:0975" type="rhsa" title="RHSA-2026:0975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13601" id="CVE-2025-13601" type="cve" title="CVE-2025-13601"/>
      <reference href="https://bugzilla.redhat.com/2416741" id="2416741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0975.html" id="ALSA-2026:0975" type="self" title="ALSA-2026:0975"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="glib2-tests" version="2.80.4" release="10.el10_1.12" epoch="0" arch="aarch64" src="glib2-2.80.4-10.el10_1.12.src.rpm">
          <filename>glib2-tests-2.80.4-10.el10_1.12.aarch64.rpm</filename>
          <sum type="sha256">48c184e2d79099063e73755030a83cd5b1feeda582c46c61ca1e70aad7fb5e09</sum>
        </package>
        <package name="glib2-devel" version="2.80.4" release="10.el10_1.12" epoch="0" arch="aarch64" src="glib2-2.80.4-10.el10_1.12.src.rpm">
          <filename>glib2-devel-2.80.4-10.el10_1.12.aarch64.rpm</filename>
          <sum type="sha256">ac9e87b315481f489c387fc3f86d0044dd63365d8f86f014a187b7a456786dac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1178</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-02-02 11:36:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service due to data race in vmalloc's show_numa_info function (CVE-2025-38383)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1178" id="RHSA-2026:1178" type="rhsa" title="RHSA-2026:1178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38383" id="CVE-2025-38383" type="cve" title="CVE-2025-38383"/>
      <reference href="https://bugzilla.redhat.com/2383425" id="2383425" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1178.html" id="ALSA-2026:1178" type="self" title="ALSA-2026:1178"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="kernel-doc" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-doc-6.12.0-124.29.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">0f961ae1a6b5865659bc867e56daaa1c8a87641446b56d5f05b91eb6d8ca40d5</sum>
        </package>
        <package name="kernel-devel-matched" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-devel-matched-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">2b4ae077110fe29cf0a5850adc9f06405595697c62626288f16f2d182be226d5</sum>
        </package>
        <package name="python3-perf" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>python3-perf-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">2b68a7f60dd7f1261482d212ef9324bde2ae3588cd2b0eda5374ffe1b584d65f</sum>
        </package>
        <package name="kernel-headers" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-headers-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">51e55d540e60e299936c314ea0bd99db9c5d14708567b70b60098ffc65600ac1</sum>
        </package>
        <package name="rtla" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>rtla-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">96b579edc2e7ca83b998b5bb13a31857ece2740f8578c271c67f10fddb12a4d5</sum>
        </package>
        <package name="kernel-64k-devel" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">98e1f4ec889cf16726486f9dfe371fdcfef624c55f84500e2990fbeec51efd2c</sum>
        </package>
        <package name="kernel-64k-debug-devel" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">9dc6c5889f4708044a66b4f86eb93a4c8d2e847136da76f3808f70b8c8a091b7</sum>
        </package>
        <package name="kernel-debug-devel-matched" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-matched-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c64facf9cba04ce4cdf354e7d7f3b2f0c04738bc26d4923fbba95ae74190d03c</sum>
        </package>
        <package name="kernel-64k-devel-matched" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-64k-devel-matched-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">d6bb4efc31c4880195f66d0b3be26d9a3d3162b95722ccb6908ac869ce1eacc6</sum>
        </package>
        <package name="kernel-64k-debug-devel-matched" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-64k-debug-devel-matched-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">dba583152a18fe24a17d57f4da752a17184af1d936847cab253d06aaac99a5d2</sum>
        </package>
        <package name="rv" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>rv-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">e63fe6bfe5cc333a5622885aec1380e8d4c33b587b784db054597407b655e393</sum>
        </package>
        <package name="perf" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>perf-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">eaaf5986d38d66e8f174c263f4cac72732a0c6c481483cdcb1b177b092069478</sum>
        </package>
        <package name="kernel-devel" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-devel-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">f30ff2712e6755eaa2f5bffb202bab1bdab349d81d7428fff5ed783570ad334c</sum>
        </package>
        <package name="kernel-debug-devel" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="aarch64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-debug-devel-6.12.0-124.29.1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">fbf955e4137ae1a985b013a4fad3a8e24dc8c74a6b79a0b10128227499bcadc9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1334</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:28:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Integer overflow in memalign leads to heap corruption (CVE-2026-0861)
  * glibc: glibc: Information disclosure via zero-valued network query (CVE-2026-0915)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1334" id="RHSA-2026:1334" type="rhsa" title="RHSA-2026:1334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0861" id="CVE-2026-0861" type="cve" title="CVE-2026-0861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0915" id="CVE-2026-0915" type="cve" title="CVE-2026-0915"/>
      <reference href="https://bugzilla.redhat.com/2429771" id="2429771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430201" id="2430201" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1334.html" id="ALSA-2026:1334" type="self" title="ALSA-2026:1334"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="glibc-utils" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="aarch64" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>glibc-utils-2.39-58.el10_1.7.alma.1.aarch64.rpm</filename>
          <sum type="sha256">7ecbc32d9af8ece3917ceec8efaf8844bc1b49f5300c516f6d65ef82f0d157d3</sum>
        </package>
        <package name="glibc-doc" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="noarch" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>glibc-doc-2.39-58.el10_1.7.alma.1.noarch.rpm</filename>
          <sum type="sha256">b2422e9d9937d429da8df4c844201296ea1f22ce407357c48fc793ee07b10045</sum>
        </package>
        <package name="glibc-locale-source" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="aarch64" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>glibc-locale-source-2.39-58.el10_1.7.alma.1.aarch64.rpm</filename>
          <sum type="sha256">b5efd4ebbd9f78690cbedec2104e9c80646f7260583ea758d42c584d2a062225</sum>
        </package>
        <package name="glibc-devel" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="aarch64" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>glibc-devel-2.39-58.el10_1.7.alma.1.aarch64.rpm</filename>
          <sum type="sha256">d2256b1b851ec934a1b733523d5485ec8da9f438aaec8d17e1e12296f22e4384</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1472</id>
    <title>Important: openssl security update</title>
    <issued date="2026-01-28 00:00:00"/>
    <updated date="2026-01-28 19:58:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file (CVE-2025-11187)
  * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing (CVE-2025-15467)
  * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling (CVE-2025-15468)
  * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation (CVE-2025-15469)
  * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression (CVE-2025-66199)
  * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)
  * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls (CVE-2025-69418)
  * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419)
  * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)
  * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)
  * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)
  * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1472" id="RHSA-2026:1472" type="rhsa" title="RHSA-2026:1472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11187" id="CVE-2025-11187" type="cve" title="CVE-2025-11187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15467" id="CVE-2025-15467" type="cve" title="CVE-2025-15467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15468" id="CVE-2025-15468" type="cve" title="CVE-2025-15468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15469" id="CVE-2025-15469" type="cve" title="CVE-2025-15469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66199" id="CVE-2025-66199" type="cve" title="CVE-2025-66199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68160" id="CVE-2025-68160" type="cve" title="CVE-2025-68160"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69418" id="CVE-2025-69418" type="cve" title="CVE-2025-69418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69419" id="CVE-2025-69419" type="cve" title="CVE-2025-69419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69420" id="CVE-2025-69420" type="cve" title="CVE-2025-69420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69421" id="CVE-2025-69421" type="cve" title="CVE-2025-69421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22795" id="CVE-2026-22795" type="cve" title="CVE-2026-22795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22796" id="CVE-2026-22796" type="cve" title="CVE-2026-22796"/>
      <reference href="https://bugzilla.redhat.com/2430375" id="2430375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430376" id="2430376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430377" id="2430377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430378" id="2430378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430379" id="2430379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430380" id="2430380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430381" id="2430381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430386" id="2430386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430387" id="2430387" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430388" id="2430388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430389" id="2430389" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430390" id="2430390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1472.html" id="ALSA-2026:1472" type="self" title="ALSA-2026:1472"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="openssl-devel" version="3.5.1" release="7.el10_1.alma.1" epoch="1" arch="aarch64" src="openssl-3.5.1-7.el10_1.alma.1.src.rpm">
          <filename>openssl-devel-3.5.1-7.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">3523f929691232e0eb1e627d3cf45c6f548ddb5b13a11a64b569d11497a988cf</sum>
        </package>
        <package name="openssl-perl" version="3.5.1" release="7.el10_1.alma.1" epoch="1" arch="aarch64" src="openssl-3.5.1-7.el10_1.alma.1.src.rpm">
          <filename>openssl-perl-3.5.1-7.el10_1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">917611d59595fd28bd2bb61c0b4293579baf2e1c6495c00500c005aeeb9403c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1597</id>
    <title>Moderate: iperf3 security update</title>
    <issued date="2026-01-29 00:00:00"/>
    <updated date="2026-02-02 10:00:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>iperf3 security update</summary>
    <description>Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.  

Security Fix(es):  

  * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1597" id="RHSA-2026:1597" type="rhsa" title="RHSA-2026:1597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-54349" id="CVE-2025-54349" type="cve" title="CVE-2025-54349"/>
      <reference href="https://bugzilla.redhat.com/2386151" id="2386151" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1597.html" id="ALSA-2026:1597" type="self" title="ALSA-2026:1597"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="iperf3" version="3.17.1" release="5.el10_1" epoch="0" arch="aarch64" src="iperf3-3.17.1-5.el10_1.src.rpm">
          <filename>iperf3-3.17.1-5.el10_1.aarch64.rpm</filename>
          <sum type="sha256">6b2f179de74eaa61ec0c1acf145bfb475462fa06c54407a9df35b29d2563686f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1628</id>
    <title>Important: php security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-02 09:59:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>php security update</summary>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  

Security Fix(es):  

  * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)
  * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177)
  * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement (CVE-2025-14180)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1628" id="RHSA-2026:1628" type="rhsa" title="RHSA-2026:1628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14177" id="CVE-2025-14177" type="cve" title="CVE-2025-14177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14178" id="CVE-2025-14178" type="cve" title="CVE-2025-14178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14180" id="CVE-2025-14180" type="cve" title="CVE-2025-14180"/>
      <reference href="https://bugzilla.redhat.com/2425625" id="2425625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425626" id="2425626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425627" id="2425627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1628.html" id="ALSA-2026:1628" type="self" title="ALSA-2026:1628"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-aarch64-appstream-rpms__10_0_default">
        <name>almalinux-10-for-aarch64-appstream-rpms__10_0_default</name>
        <package name="php" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">19bf892ca2d76254ff7c9e14986abd25d59a9702cd92b87e67c737e586313a05</sum>
        </package>
        <package name="php-soap" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-soap-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">2bcd1e08902e182b33d9bafb3fe7008b9b3f2b43f061de905818f028665ecc31</sum>
        </package>
        <package name="php-ffi" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-ffi-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">2c73c883e20231c1ab2f5f0580062b9c458740bea20bea2448b69adc2d4e7f97</sum>
        </package>
        <package name="php-cli" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-cli-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">303f8aac0fc489e79c2d107a4913cfac72d410df519c631e165a8a5cba8b0d2e</sum>
        </package>
        <package name="php-intl" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-intl-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">39cee3cd2a40dd9df6bc1b74350890bffa93db5177f900786e2d7cfbe7a0a51a</sum>
        </package>
        <package name="php-mysqlnd" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-mysqlnd-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">3cee83d6fb10dc9fa1ac6eff8a01e4b603f3b770ca682affab29402037a7f953</sum>
        </package>
        <package name="php-common" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-common-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">3dede40256563f3ab9911d5c8b96348113851661d051ccd31aa5722451c530b4</sum>
        </package>
        <package name="php-fpm" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-fpm-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">45a17837b6d5249a82e4f2a506dc23db041e6e4b046681ba31ea23e30d52d091</sum>
        </package>
        <package name="php-dbg" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-dbg-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">4820699aad3a6f8eb6418cf2d189a8305bd98ba94a1354f8a5cdb2a680cadd03</sum>
        </package>
        <package name="php-odbc" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-odbc-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">76d77da3b42e45efe032a4b951b44b8cf5ff0098950ee60387dc5294044da739</sum>
        </package>
        <package name="php-process" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-process-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">850c3e309a4790e4d54921ad86db9198ba01c896534637e0aa68682d5913d809</sum>
        </package>
        <package name="php-snmp" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-snmp-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">8c1a9eae853c35ef152bda1867f473b03b0f5cdb7bc0d0fbf5d25aa2826cbf56</sum>
        </package>
        <package name="php-ldap" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-ldap-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">96130c3956a41d69b6f28abd6cdc214befaf9213587af068390e712ca3abb63a</sum>
        </package>
        <package name="php-xml" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-xml-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">a080403b9841bc6b5757a142eac3e2ba8238f6ef1e43111ef2190afb2b2362d5</sum>
        </package>
        <package name="php-mbstring" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-mbstring-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">b0ec0e6ddee682a9fa607430f340ff9200d6bbaf20e41234443a9d92540aee11</sum>
        </package>
        <package name="php-bcmath" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-bcmath-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">b7e17f8ad567e9bed754c89ec79322e6f19be0236423c2dc9bd5c5dbdbda24b4</sum>
        </package>
        <package name="php-pdo" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-pdo-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c085d7ce033fc69b9ab21d541a3be0388168c2384c3a7fe22c018a4734b3cb1b</sum>
        </package>
        <package name="php-opcache" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-opcache-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c0ba88276b7d6d0f59b9fe779d43204d089a00c4ee741ec9374c2d6740d6de48</sum>
        </package>
        <package name="php-dba" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-dba-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c1a3a2c86fd8b3975ab069142ac2f67b73151dba26b3c75280f935519384fa87</sum>
        </package>
        <package name="php-gmp" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-gmp-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c8455b75ac6e4493c3f85566865b70e7cad4b51e7eb7c00f492e54e5f4a949ae</sum>
        </package>
        <package name="php-enchant" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-enchant-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">c92f557a94a16cb0e74da46aea7eb711e47be79d76f92e984351c153c256cc4e</sum>
        </package>
        <package name="php-pgsql" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-pgsql-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">ca2e454cc35ed77ac41da0b548b0b84a48cfbc368d9aea2808e09189e0e27937</sum>
        </package>
        <package name="php-embedded" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-embedded-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">d8bc1a704ad52986dfdfc4db7366014aab6b5d0513e3350b7083f7e4f654f808</sum>
        </package>
        <package name="php-gd" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-gd-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">dd2e7d2fcc4a04cfab66874211a8a95b6b69f7a41bc1af9c13b1149821a386db</sum>
        </package>
        <package name="php-devel" version="8.3.29" release="1.el10_1" epoch="0" arch="aarch64" src="php-8.3.29-1.el10_1.src.rpm">
          <filename>php-devel-8.3.29-1.el10_1.aarch64.rpm</filename>
          <sum type="sha256">e48c994cdc98291311672f903934a74eaa4c3f065ec7785b3583a77309098509</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>