<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20095</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:55:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  * kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)
  * kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)
  * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  * kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)
  * kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)
  * kernel: io_uring/sqpoll: zero sqd-&gt;thread on tctx errors (CVE-2025-21633)
  * kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)
  * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  * kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)
  * kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)
  * kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)
  * kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  * kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)
  * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  * kernel: pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0 (CVE-2025-21702)
  * kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)
  * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  * kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)
  * kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)
  * kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)
  * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  * kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)
  * kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)
  * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  * kernel: HID: multitouch: Add NULL check in mt_input_configured (CVE-2024-58020)
  * kernel: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition (CVE-2024-57984)
  * kernel: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (CVE-2025-21761)
  * kernel: sched_ext: Fix incorrect autogroup migration detection (CVE-2025-21771)
  * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981)
  * kernel: memcg: fix soft lockup in the OOM process (CVE-2024-57977)
  * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790)
  * kernel: usbnet: ipheth: fix DPE OoB read (CVE-2025-21741)
  * kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CVE-2025-21785)
  * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765)
  * kernel: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (CVE-2024-58006)
  * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012)
  * kernel: wifi: brcmfmac: Check the return value of of_property_read_string_index() (CVE-2025-21750)
  * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072)
  * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)
  * kernel: wifi: mac80211: prohibit deactivating all links (CVE-2024-58061)
  * kernel: idpf: convert workqueues to unbound (CVE-2024-58057)
  * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828)
  * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826)
  * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077)
  * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075)
  * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837)
  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: net/sched: cls_api: fix error handling causing NULL dereference (CVE-2025-21857)
  * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851)
  * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855)
  * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844)
  * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853)
  * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847)
  * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864)
  * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088)
  * kernel: acct: perform last write from workqueue (CVE-2025-21846)
  * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861)
  * kernel: io_uring: prevent opcode speculation (CVE-2025-21863)
  * kernel: fbdev: hyperv_fb: Allow graceful removal of framebuffer (CVE-2025-21976)
  * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056)
  * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749)
  * microcode_ctl: From CVEorg collector (CVE-2024-28956)
  * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994)
  * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116)
  * kernel: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (CVE-2025-38412)
  * kernel: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (CVE-2025-38369)
  * kernel: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (CVE-2025-38468)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20095" id="RHSA-2025:20095" type="rhsa" title="RHSA-2025:20095"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28956" id="CVE-2024-28956" type="cve" title="CVE-2024-28956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36350" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36357" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49570" id="CVE-2024-49570" type="cve" title="CVE-2024-49570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52332" id="CVE-2024-52332" type="cve" title="CVE-2024-52332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53147" id="CVE-2024-53147" type="cve" title="CVE-2024-53147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53216" id="CVE-2024-53216" type="cve" title="CVE-2024-53216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53222" id="CVE-2024-53222" type="cve" title="CVE-2024-53222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53241" id="CVE-2024-53241" type="cve" title="CVE-2024-53241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54456" id="CVE-2024-54456" type="cve" title="CVE-2024-54456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56662" id="CVE-2024-56662" type="cve" title="CVE-2024-56662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56675" id="CVE-2024-56675" type="cve" title="CVE-2024-56675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56690" id="CVE-2024-56690" type="cve" title="CVE-2024-56690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57901" id="CVE-2024-57901" type="cve" title="CVE-2024-57901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57902" id="CVE-2024-57902" type="cve" title="CVE-2024-57902"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57941" id="CVE-2024-57941" type="cve" title="CVE-2024-57941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57942" id="CVE-2024-57942" type="cve" title="CVE-2024-57942"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57977" id="CVE-2024-57977" type="cve" title="CVE-2024-57977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57981" id="CVE-2024-57981" type="cve" title="CVE-2024-57981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57984" id="CVE-2024-57984" type="cve" title="CVE-2024-57984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57986" id="CVE-2024-57986" type="cve" title="CVE-2024-57986"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57987" id="CVE-2024-57987" type="cve" title="CVE-2024-57987"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57988" id="CVE-2024-57988" type="cve" title="CVE-2024-57988"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57989" id="CVE-2024-57989" type="cve" title="CVE-2024-57989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57995" id="CVE-2024-57995" type="cve" title="CVE-2024-57995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58004" id="CVE-2024-58004" type="cve" title="CVE-2024-58004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58005" id="CVE-2024-58005" type="cve" title="CVE-2024-58005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58006" id="CVE-2024-58006" type="cve" title="CVE-2024-58006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58012" id="CVE-2024-58012" type="cve" title="CVE-2024-58012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58013" id="CVE-2024-58013" type="cve" title="CVE-2024-58013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58014" id="CVE-2024-58014" type="cve" title="CVE-2024-58014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58015" id="CVE-2024-58015" type="cve" title="CVE-2024-58015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58020" id="CVE-2024-58020" type="cve" title="CVE-2024-58020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58057" id="CVE-2024-58057" type="cve" title="CVE-2024-58057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58061" id="CVE-2024-58061" type="cve" title="CVE-2024-58061"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58069" id="CVE-2024-58069" type="cve" title="CVE-2024-58069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58072" id="CVE-2024-58072" type="cve" title="CVE-2024-58072"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58075" id="CVE-2024-58075" type="cve" title="CVE-2024-58075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58077" id="CVE-2024-58077" type="cve" title="CVE-2024-58077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58088" id="CVE-2024-58088" type="cve" title="CVE-2024-58088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21633" id="CVE-2025-21633" type="cve" title="CVE-2025-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21647" id="CVE-2025-21647" type="cve" title="CVE-2025-21647"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21652" id="CVE-2025-21652" type="cve" title="CVE-2025-21652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21655" id="CVE-2025-21655" type="cve" title="CVE-2025-21655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21671" id="CVE-2025-21671" type="cve" title="CVE-2025-21671"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21680" id="CVE-2025-21680" type="cve" title="CVE-2025-21680"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21691" id="CVE-2025-21691" type="cve" title="CVE-2025-21691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21693" id="CVE-2025-21693" type="cve" title="CVE-2025-21693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21696" id="CVE-2025-21696" type="cve" title="CVE-2025-21696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21702" id="CVE-2025-21702" type="cve" title="CVE-2025-21702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21726" id="CVE-2025-21726" type="cve" title="CVE-2025-21726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21732" id="CVE-2025-21732" type="cve" title="CVE-2025-21732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21738" id="CVE-2025-21738" type="cve" title="CVE-2025-21738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21741" id="CVE-2025-21741" type="cve" title="CVE-2025-21741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21742" id="CVE-2025-21742" type="cve" title="CVE-2025-21742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21743" id="CVE-2025-21743" type="cve" title="CVE-2025-21743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21750" id="CVE-2025-21750" type="cve" title="CVE-2025-21750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21761" id="CVE-2025-21761" type="cve" title="CVE-2025-21761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21765" id="CVE-2025-21765" type="cve" title="CVE-2025-21765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21771" id="CVE-2025-21771" type="cve" title="CVE-2025-21771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21777" id="CVE-2025-21777" type="cve" title="CVE-2025-21777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21785" id="CVE-2025-21785" type="cve" title="CVE-2025-21785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21786" id="CVE-2025-21786" type="cve" title="CVE-2025-21786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21790" id="CVE-2025-21790" type="cve" title="CVE-2025-21790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21791" id="CVE-2025-21791" type="cve" title="CVE-2025-21791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21795" id="CVE-2025-21795" type="cve" title="CVE-2025-21795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21796" id="CVE-2025-21796" type="cve" title="CVE-2025-21796"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21826" id="CVE-2025-21826" type="cve" title="CVE-2025-21826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21828" id="CVE-2025-21828" type="cve" title="CVE-2025-21828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21837" id="CVE-2025-21837" type="cve" title="CVE-2025-21837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21844" id="CVE-2025-21844" type="cve" title="CVE-2025-21844"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21846" id="CVE-2025-21846" type="cve" title="CVE-2025-21846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21847" id="CVE-2025-21847" type="cve" title="CVE-2025-21847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21851" id="CVE-2025-21851" type="cve" title="CVE-2025-21851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21853" id="CVE-2025-21853" type="cve" title="CVE-2025-21853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21855" id="CVE-2025-21855" type="cve" title="CVE-2025-21855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21857" id="CVE-2025-21857" type="cve" title="CVE-2025-21857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21861" id="CVE-2025-21861" type="cve" title="CVE-2025-21861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21863" id="CVE-2025-21863" type="cve" title="CVE-2025-21863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21864" id="CVE-2025-21864" type="cve" title="CVE-2025-21864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21976" id="CVE-2025-21976" type="cve" title="CVE-2025-21976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22056" id="CVE-2025-22056" type="cve" title="CVE-2025-22056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37749" id="CVE-2025-37749" type="cve" title="CVE-2025-37749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37994" id="CVE-2025-37994" type="cve" title="CVE-2025-37994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38116" id="CVE-2025-38116" type="cve" title="CVE-2025-38116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38369" id="CVE-2025-38369" type="cve" title="CVE-2025-38369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38412" id="CVE-2025-38412" type="cve" title="CVE-2025-38412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38468" id="CVE-2025-38468" type="cve" title="CVE-2025-38468"/>
      <reference href="https://bugzilla.redhat.com/2331326" id="2331326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2333985" id="2333985" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334373" id="2334373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334415" id="2334415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334547" id="2334547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334548" id="2334548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334676" id="2334676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337121" id="2337121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338185" id="2338185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338211" id="2338211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338813" id="2338813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338821" id="2338821" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338828" id="2338828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338998" id="2338998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339130" id="2339130" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339141" id="2339141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343172" id="2343172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343186" id="2343186" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344684" id="2344684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344687" id="2344687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345240" id="2345240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346272" id="2346272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348522" id="2348522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348523" id="2348523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348541" id="2348541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348543" id="2348543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348547" id="2348547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348550" id="2348550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348556" id="2348556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348561" id="2348561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348567" id="2348567" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348572" id="2348572" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348574" id="2348574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348577" id="2348577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348581" id="2348581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348584" id="2348584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348587" id="2348587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348590" id="2348590" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348592" id="2348592" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348593" id="2348593" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348595" id="2348595" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348597" id="2348597" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348600" id="2348600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348601" id="2348601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348602" id="2348602" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348603" id="2348603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348612" id="2348612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348617" id="2348617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348620" id="2348620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348621" id="2348621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348625" id="2348625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348629" id="2348629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348630" id="2348630" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348645" id="2348645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348647" id="2348647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348650" id="2348650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348656" id="2348656" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350363" id="2350363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350364" id="2350364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350373" id="2350373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350375" id="2350375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350386" id="2350386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350392" id="2350392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350396" id="2350396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350397" id="2350397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350589" id="2350589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351605" id="2351605" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351606" id="2351606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351608" id="2351608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351612" id="2351612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351613" id="2351613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351616" id="2351616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351618" id="2351618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351620" id="2351620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351624" id="2351624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351625" id="2351625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351629" id="2351629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356664" id="2356664" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360215" id="2360215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363332" id="2363332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366125" id="2366125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369184" id="2369184" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376076" id="2376076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383398" id="2383398" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383432" id="2383432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383913" id="2383913" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20095.html" id="ALSA-2025:20095" type="self" title="ALSA-2025:20095"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="kernel-debug" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-debug-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">1ff7cc257ab9b7c5570966ff8e41a43a3f06e2cf5b4cb14f9aff44eab56c637e</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">24a33a1a9367f92518802d3d0b8e772dae9fad8a750c25ac77939876624faa3c</sum>
        </package>
        <package name="kernel" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">2530429b341b7c1d423d2d4d84b1d749335c5b967e43ae11b2d3204bfb70db99</sum>
        </package>
        <package name="kernel-debug-modules-core" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-core-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">2eef9a0f4823f2d825b3fbb696d04c3595c13db1bd403d348e9143d49fd790fe</sum>
        </package>
        <package name="kernel-zfcpdump-modules-core" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-core-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">3843d6016bbaaf483e94d0a10c29fcd7c222d90b365fcd40bdfcf9d697e82143</sum>
        </package>
        <package name="kernel-abi-stablelists" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-abi-stablelists-6.12.0-124.8.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">4f74134f4169248f10435529213d688e0d6e912471ee38fdea6db16b599c4c3c</sum>
        </package>
        <package name="kernel-tools" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-tools-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">6ab8168dd04e66734ceab39c68f0b054a439b7657a83950500e493cd3bd273b0</sum>
        </package>
        <package name="kernel-modules" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-modules-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">8fc923ec05354f226f16a98b6cea00635310230aeffd6d18bed130b08ff9d3d1</sum>
        </package>
        <package name="kernel-modules-extra" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">968314d123ef691bd2a7cee73ebd6fd813b879ae401a9f9783409ac1dfcd9c84</sum>
        </package>
        <package name="kernel-modules-extra-matched" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-matched-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">9b97955e6349e824811ec229d0284f571eeeb79653c5284acfc28a49fe7e0463</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-core-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">b14abd2bb22c103580b76d0fb1e95e031d2a8badd72550902996da611d263d6b</sum>
        </package>
        <package name="kernel-debug-core" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-debug-core-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">b558d5e6319d8de0975703f44c73982cf461e26e3acca2763f9bd248c5f44923</sum>
        </package>
        <package name="kernel-debug-modules" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">b7f8a952c69b7eebd614af24bc6c688e83572269550e0646403c5848cadbdbec</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-extra-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">ccbdec652aad1fa4eb9c393e7a77031af1b23dc1552c1f967c884e20230df2e8</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">d7ae1a3e97ec0255bf71d5b65681198e200c2e47def058880223c1cd27f64857</sum>
        </package>
        <package name="kernel-modules-core" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-modules-core-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">dcd25762db76f19ff185963206f043b4dc429e0323bc867229ea19337d6746e6</sum>
        </package>
        <package name="kernel-core" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-core-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">e16c9e652a5c79dce9fe02002d7259da1eb354753404cd8958b5560123b8edf2</sum>
        </package>
        <package name="kernel-zfcpdump" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-6.12.0-124.8.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">f38c6e5c83f5fd7a66bcb6b90338b889bbde756dae379b75e6c36935ce481fba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20126</id>
    <title>Moderate: openssh security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:51:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding (CVE-2025-32728)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20126" id="RHSA-2025:20126" type="rhsa" title="RHSA-2025:20126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32728" id="CVE-2025-32728" type="cve" title="CVE-2025-32728"/>
      <reference href="https://bugzilla.redhat.com/2358767" id="2358767" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20126.html" id="ALSA-2025:20126" type="self" title="ALSA-2025:20126"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="openssh-keycat" version="9.9p1" release="11.el10.alma.1" epoch="0" arch="s390x" src="openssh-9.9p1-11.el10.alma.1.src.rpm">
          <filename>openssh-keycat-9.9p1-11.el10.alma.1.s390x.rpm</filename>
          <sum type="sha256">10e28d481420b46b7b3ac935cfc1bc732136a68fabd4fc5032520937d4b65c69</sum>
        </package>
        <package name="openssh" version="9.9p1" release="11.el10.alma.1" epoch="0" arch="s390x" src="openssh-9.9p1-11.el10.alma.1.src.rpm">
          <filename>openssh-9.9p1-11.el10.alma.1.s390x.rpm</filename>
          <sum type="sha256">437b546a032b4e24d523646856165478e250c861a4eaf956688299b5b4639ba2</sum>
        </package>
        <package name="openssh-clients" version="9.9p1" release="11.el10.alma.1" epoch="0" arch="s390x" src="openssh-9.9p1-11.el10.alma.1.src.rpm">
          <filename>openssh-clients-9.9p1-11.el10.alma.1.s390x.rpm</filename>
          <sum type="sha256">c1439c29c60ad2140f52bdb81f4d9ff45091c4957cf634292d654f9d8344d7c1</sum>
        </package>
        <package name="openssh-server" version="9.9p1" release="11.el10.alma.1" epoch="0" arch="s390x" src="openssh-9.9p1-11.el10.alma.1.src.rpm">
          <filename>openssh-server-9.9p1-11.el10.alma.1.s390x.rpm</filename>
          <sum type="sha256">d6fd5b483fe39ddc0775384b8c23b038c3f88857a6f1bc8b0c8020d90edd644b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20145</id>
    <title>Low: shadow-utils security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:50:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>shadow-utils security update</summary>
    <description>The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts.   

Security Fix(es):  

  * shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise (CVE-2024-56433)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20145" id="RHSA-2025:20145" type="rhsa" title="RHSA-2025:20145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56433" id="CVE-2024-56433" type="cve" title="CVE-2024-56433"/>
      <reference href="https://bugzilla.redhat.com/2334165" id="2334165" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20145.html" id="ALSA-2025:20145" type="self" title="ALSA-2025:20145"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="shadow-utils" version="4.15.0" release="8.el10" epoch="2" arch="s390x" src="shadow-utils-4.15.0-8.el10.src.rpm">
          <filename>shadow-utils-4.15.0-8.el10.s390x.rpm</filename>
          <sum type="sha256">5f4668dc8bae0f690addc4d5eb1489dbe69a6fd17073bba1142421365dcaf680</sum>
        </package>
        <package name="shadow-utils-subid" version="4.15.0" release="8.el10" epoch="2" arch="s390x" src="shadow-utils-4.15.0-8.el10.src.rpm">
          <filename>shadow-utils-subid-4.15.0-8.el10.s390x.rpm</filename>
          <sum type="sha256">bb9e909cc32c463d8eaf713e08f40d8c47e3c2cb53c62d3c4097caf50cbb3a98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20155</id>
    <title>Moderate: binutils security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:47:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.  

Security Fix(es):  

  * binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption (CVE-2025-5244)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20155" id="RHSA-2025:20155" type="rhsa" title="RHSA-2025:20155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5244" id="CVE-2025-5244" type="cve" title="CVE-2025-5244"/>
      <reference href="https://bugzilla.redhat.com/2368763" id="2368763" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20155.html" id="ALSA-2025:20155" type="self" title="ALSA-2025:20155"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="binutils" version="2.41" release="58.el10.alma.1" epoch="0" arch="s390x" src="binutils-2.41-58.el10.alma.1.src.rpm">
          <filename>binutils-2.41-58.el10.alma.1.s390x.rpm</filename>
          <sum type="sha256">7db5cc5c820d207b3b63fa052b4dec22dc7c14b196909371424ac8ede02ece1c</sum>
        </package>
        <package name="binutils-gold" version="2.41" release="58.el10.alma.1" epoch="0" arch="s390x" src="binutils-2.41-58.el10.alma.1.src.rpm">
          <filename>binutils-gold-2.41-58.el10.alma.1.s390x.rpm</filename>
          <sum type="sha256">87abcfa6c9cdc85fb0003a37de310c9ff466efc1ce282b2395a194419bca0ada</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20181</id>
    <title>Important: pam security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:46:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pam security update</summary>
    <description>Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  

Security Fix(es):  

  * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20181" id="RHSA-2025:20181" type="rhsa" title="RHSA-2025:20181"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6020" id="CVE-2025-6020" type="cve" title="CVE-2025-6020"/>
      <reference href="https://bugzilla.redhat.com/2372512" id="2372512" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20181.html" id="ALSA-2025:20181" type="self" title="ALSA-2025:20181"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="pam-libs" version="1.6.1" release="8.el10" epoch="0" arch="s390x" src="pam-1.6.1-8.el10.src.rpm">
          <filename>pam-libs-1.6.1-8.el10.s390x.rpm</filename>
          <sum type="sha256">84f3a29da64107fcc8c5e8b08e77b10b3ab7bb24fd8c9e39a138371e1ff2b35a</sum>
        </package>
        <package name="pam" version="1.6.1" release="8.el10" epoch="0" arch="s390x" src="pam-1.6.1-8.el10.src.rpm">
          <filename>pam-1.6.1-8.el10.s390x.rpm</filename>
          <sum type="sha256">f9ee86d860bf84ba9aad2296ec52bbb1ad5408c1903eb0e3dd2e1cd3d5f32ae3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21013</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:54:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21013" id="RHSA-2025:21013" type="rhsa" title="RHSA-2025:21013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5318" id="CVE-2025-5318" type="cve" title="CVE-2025-5318"/>
      <reference href="https://bugzilla.redhat.com/2369131" id="2369131" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21013.html" id="ALSA-2025:21013" type="self" title="ALSA-2025:21013"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="libssh-config" version="0.11.1" release="4.el10_1" epoch="0" arch="noarch" src="libssh-0.11.1-4.el10_1.src.rpm">
          <filename>libssh-config-0.11.1-4.el10_1.noarch.rpm</filename>
          <sum type="sha256">2a01a5576fcee6b03712a428ac114be2760d3af964651ed239dc94944f496191</sum>
        </package>
        <package name="libssh" version="0.11.1" release="4.el10_1" epoch="0" arch="s390x" src="libssh-0.11.1-4.el10_1.src.rpm">
          <filename>libssh-0.11.1-4.el10_1.s390x.rpm</filename>
          <sum type="sha256">5f9b643489548fd7edf82cad56a822421b0b604c4f7f2ba04fbd34475346148c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21015</id>
    <title>Moderate: vim security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:56:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>vim security update</summary>
    <description>Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: Vim path traversal (CVE-2025-53906)
  * vim: Vim path traversial (CVE-2025-53905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21015" id="RHSA-2025:21015" type="rhsa" title="RHSA-2025:21015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53905" id="CVE-2025-53905" type="cve" title="CVE-2025-53905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53906" id="CVE-2025-53906" type="cve" title="CVE-2025-53906"/>
      <reference href="https://bugzilla.redhat.com/2380360" id="2380360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2380362" id="2380362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21015.html" id="ALSA-2025:21015" type="self" title="ALSA-2025:21015"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="vim-data" version="9.1.083" release="6.el10_1" epoch="2" arch="noarch" src="vim-9.1.083-6.el10_1.src.rpm">
          <filename>vim-data-9.1.083-6.el10_1.noarch.rpm</filename>
          <sum type="sha256">729289bc8850a2384e493972a49c5e00f5058def0d93ff9c89d798dfcf5024a0</sum>
        </package>
        <package name="vim-minimal" version="9.1.083" release="6.el10_1" epoch="2" arch="s390x" src="vim-9.1.083-6.el10_1.src.rpm">
          <filename>vim-minimal-9.1.083-6.el10_1.s390x.rpm</filename>
          <sum type="sha256">a37dd185763abfbbeb7e90f053e90a5d821144ce7a056594767849db6a0c2b6e</sum>
        </package>
        <package name="vim-filesystem" version="9.1.083" release="6.el10_1" epoch="2" arch="noarch" src="vim-9.1.083-6.el10_1.src.rpm">
          <filename>vim-filesystem-9.1.083-6.el10_1.noarch.rpm</filename>
          <sum type="sha256">d1c7b06a409faef2280113b7c4e8bf51bff58ad39fb8494d4dc673c00d4db25b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21020</id>
    <title>Important: sssd security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2026-01-14 12:41:29"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.  

Security Fix(es):  

  * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21020" id="RHSA-2025:21020" type="rhsa" title="RHSA-2025:21020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11561" id="CVE-2025-11561" type="cve" title="CVE-2025-11561"/>
      <reference href="https://bugzilla.redhat.com/2402727" id="2402727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21020.html" id="ALSA-2025:21020" type="self" title="ALSA-2025:21020"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="python3-libipa_hbac" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>python3-libipa_hbac-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">06123d4ef73ab7eaf654d6c2e9a068e13e38702d159bab1918f74e560fe688bc</sum>
        </package>
        <package name="libsss_certmap" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>libsss_certmap-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">06a37fbceba5b77f525d60c980853d5967dc34b464b0d308e29419f36079a6cd</sum>
        </package>
        <package name="sssd-krb5" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-krb5-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">0e166d227434d203fdfa51764e53dc028512556dca8348878c52ba53633def32</sum>
        </package>
        <package name="sssd-common" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-common-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">133752d63322d6d1e7b5e640e2c275dba3ea138736432a385dee2ce41e59acd6</sum>
        </package>
        <package name="libsss_autofs" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>libsss_autofs-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">1f8150842df12e263fa51bcbd63bc62a890bdfaa89199270dca8a9222f8189c9</sum>
        </package>
        <package name="libipa_hbac" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>libipa_hbac-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">2ed0e9fb21a3931de40813bd37482b89b0e6b33de08d8ae88f2b8dd7152e1352</sum>
        </package>
        <package name="sssd-kcm" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-kcm-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">323a8a1a0bb14ac19ad65989c2f827b159358732773efae4c2908550b7190785</sum>
        </package>
        <package name="sssd-winbind-idmap" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-winbind-idmap-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">383110cab6fd07011726f9efcb5a45bbe12d83d07ed6f5e52e816eba702d4db7</sum>
        </package>
        <package name="sssd-common-pac" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-common-pac-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">4b62ef8644d3368d86e431470b93212f95032ac25037ae74fbe50115b1762d03</sum>
        </package>
        <package name="sssd-passkey" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-passkey-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">549825cf72f62491a07e563dacf1a9e98b50d2181fb7f209d79ccab7afd29485</sum>
        </package>
        <package name="sssd-ad" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-ad-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">5a2ded69f6d3ffde562e3f488005ee54ff051c2d4a6cb213a0b6fd528bcfeb04</sum>
        </package>
        <package name="sssd-client" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-client-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">691fca94c9592da4d07df1784bf72731d6bb2b909b4f931c524f88182761723b</sum>
        </package>
        <package name="python3-sss-murmur" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>python3-sss-murmur-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">71a29be78a22ac1029447c8248e9efe5e42533cd017eb2aa80e6143a03cafe3d</sum>
        </package>
        <package name="sssd" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">73f2b2069a20e46ccc7943b09fa5cf9db3d1c88a3882d8f4c8f14e892a1613e6</sum>
        </package>
        <package name="libsss_idmap" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>libsss_idmap-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">7c0090ecd31f72feb0792d40abc97fd9450018b5a025ceec6236718de48fc023</sum>
        </package>
        <package name="python3-sssdconfig" version="2.11.1" release="2.el10_1.1" epoch="0" arch="noarch" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>python3-sssdconfig-2.11.1-2.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">884edb41685a767d190dcb3001baac0be003acb46da98d3abc39ac3d2f37aeab</sum>
        </package>
        <package name="sssd-nfs-idmap" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-nfs-idmap-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">89d420bfdab1d88f25720f13b75ebb99b318286e9ad63d52bcb177aab2935659</sum>
        </package>
        <package name="sssd-ldap" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-ldap-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">919c66c33a6d5cba4c50a18cddcab36f194cbd3cc064fb91ea8ea9b90c3db536</sum>
        </package>
        <package name="sssd-ipa" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-ipa-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">96244b43501e1b8296ce40dd20e08f3dd144c2249e1f82313435ee2d8b186fc1</sum>
        </package>
        <package name="python3-sss" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>python3-sss-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">b13d8d5ad533d914f1cdf14dee8c3375f848cf433bbd5627510f81e78ae8e9fd</sum>
        </package>
        <package name="sssd-tools" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-tools-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">c06fb762cd19b6750783b8dd53418318fe6f532ecb486a294f552be06fe73e94</sum>
        </package>
        <package name="sssd-krb5-common" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-krb5-common-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">d2eff4d81209a0473a3604ea73903ca151ed6bbf9cbb2a61e5f0ab09c9d99686</sum>
        </package>
        <package name="sssd-dbus" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-dbus-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">d64a09a420a4e4e7e019b55654961f3571f8211793fe2b95b6fb3277b0178af5</sum>
        </package>
        <package name="libsss_sudo" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>libsss_sudo-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">e6ba56e62597f1533a2b7b755d65be58f0a9f1115b6009e178fde43fca11cd84</sum>
        </package>
        <package name="libsss_nss_idmap" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>libsss_nss_idmap-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">e9cdf654550add9688a2f8c21c9cd075b264a4bc17cfbc3c17b9506c0121e9e4</sum>
        </package>
        <package name="sssd-proxy" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>sssd-proxy-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">fc518492329859ba5ea282bfa1be11cbc95323f9cf13015f9e828949483161f9</sum>
        </package>
        <package name="python3-libsss_nss_idmap" version="2.11.1" release="2.el10_1.1" epoch="0" arch="s390x" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>python3-libsss_nss_idmap-2.11.1-2.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">fd43972fa6cc02e3c1e3f2788dc191277a4b9a5d06ab95b4d8bf1ebebca62444</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21030</id>
    <title>Important: expat security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:57:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>expat security update</summary>
    <description>Expat is a C library for parsing XML documents.  

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21030" id="RHSA-2025:21030" type="rhsa" title="RHSA-2025:21030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21030.html" id="ALSA-2025:21030" type="self" title="ALSA-2025:21030"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="expat" version="2.7.1" release="1.el10_1.3" epoch="0" arch="s390x" src="expat-2.7.1-1.el10_1.3.src.rpm">
          <filename>expat-2.7.1-1.el10_1.3.s390x.rpm</filename>
          <sum type="sha256">f2c9c6c37f1c1b8de9b2364acf2153d6f9a6bc45b9d5bcb662f1ef97dfcc9c87</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21038</id>
    <title>Important: kea security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-05 08:28:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kea security update</summary>
    <description>DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers support DNS Update mechanism, using stand-alone DDNS daemon.  

Security Fix(es):  

  * kea: Invalid characters cause assert (CVE-2025-11232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21038" id="RHSA-2025:21038" type="rhsa" title="RHSA-2025:21038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11232" id="CVE-2025-11232" type="cve" title="CVE-2025-11232"/>
      <reference href="https://bugzilla.redhat.com/2407178" id="2407178" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21038.html" id="ALSA-2025:21038" type="self" title="ALSA-2025:21038"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="kea" version="3.0.1" release="2.el10_1" epoch="0" arch="s390x" src="kea-3.0.1-2.el10_1.src.rpm">
          <filename>kea-3.0.1-2.el10_1.s390x.rpm</filename>
          <sum type="sha256">688233a8a4f15131c98f637dfc2ab404118de7bd71f689b0f707af0a0c218d62</sum>
        </package>
        <package name="kea-libs" version="3.0.1" release="2.el10_1" epoch="0" arch="s390x" src="kea-3.0.1-2.el10_1.src.rpm">
          <filename>kea-libs-3.0.1-2.el10_1.s390x.rpm</filename>
          <sum type="sha256">a309d236be6e62523356dcf4cbd3901bf0ff81df0660369c6faa57db761f6ddf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21248</id>
    <title>Moderate: openssl security update</title>
    <issued date="2025-11-13 00:00:00"/>
    <updated date="2025-11-25 09:31:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap (CVE-2025-9230)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21248" id="RHSA-2025:21248" type="rhsa" title="RHSA-2025:21248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9230" id="CVE-2025-9230" type="cve" title="CVE-2025-9230"/>
      <reference href="https://bugzilla.redhat.com/2396054" id="2396054" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21248.html" id="ALSA-2025:21248" type="self" title="ALSA-2025:21248"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="openssl-libs" version="3.5.1" release="4.el10_1.alma.1" epoch="1" arch="s390x" src="openssl-3.5.1-4.el10_1.alma.1.src.rpm">
          <filename>openssl-libs-3.5.1-4.el10_1.alma.1.s390x.rpm</filename>
          <sum type="sha256">761058fe064714e8be92f5795da2a74b61a25626a2fa0fe0fc6576a17521e3f9</sum>
        </package>
        <package name="openssl" version="3.5.1" release="4.el10_1.alma.1" epoch="1" arch="s390x" src="openssl-3.5.1-4.el10_1.alma.1.src.rpm">
          <filename>openssl-3.5.1-4.el10_1.alma.1.s390x.rpm</filename>
          <sum type="sha256">98e5642963c226a6b75e9d74b49bf52e4217a9e599bea0b037832b778677b548</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21931</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-12-05 08:40:39"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CVE-2025-39730)
  * kernel: tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect() (CVE-2025-39955)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21931" id="RHSA-2025:21931" type="rhsa" title="RHSA-2025:21931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39730" id="CVE-2025-39730" type="cve" title="CVE-2025-39730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39955" id="CVE-2025-39955" type="cve" title="CVE-2025-39955"/>
      <reference href="https://bugzilla.redhat.com/2393731" id="2393731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402699" id="2402699" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21931.html" id="ALSA-2025:21931" type="self" title="ALSA-2025:21931"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="kernel-tools" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-tools-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">074987eefeb1cfc1513cea00176d16c7ed4bbcfbc51a82504eb75055fcb778a4</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">177391e694d55d3ec650bf8a6d0605f776683f8753f36ef46cccb4180b6c7e09</sum>
        </package>
        <package name="kernel-zfcpdump" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">2e9938d8425d2d0862741a4b61de458ba3569be2cb087a50bbaa87e0b17c31fc</sum>
        </package>
        <package name="kernel-modules-extra" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">3bc32260468536cd09ecd64b1a561959b2b2fe10d42e5946f07202d6745ee3d5</sum>
        </package>
        <package name="kernel-modules" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-modules-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">40421dad3196ee3b0447804c9e19a5dd48a6b4fc20fb69951fe5da60cea7601e</sum>
        </package>
        <package name="kernel-debug-modules-core" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-core-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">43118a9b841d879581c47d3b4e738408d4e18bc42cdb5b418774cb0de371d036</sum>
        </package>
        <package name="kernel-debug" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-debug-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">518577c8d151ebaf22c266a8ab04894004fee1995493267c77c42fcc50f89aa0</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-core-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">52018278f43e1ba5e90ae82b7cb8a11a852ead6c16bc25dbb9ae2a1a60c81b21</sum>
        </package>
        <package name="kernel-zfcpdump-modules-core" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-core-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">69fe390a87b8cb8b08ea23d262e6a4fb2eb55ebea033fb186294d7e57d4c7a9a</sum>
        </package>
        <package name="kernel-debug-modules" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">7180949d45c0a75e2164dda3d9157c73237f41ed9b7a43ff730a78f3dab581ea</sum>
        </package>
        <package name="kernel-modules-extra-matched" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-matched-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">74694205805564c31442e6ee4ca190cebaa01ea8f4c017e65ad9fc01762c9e96</sum>
        </package>
        <package name="kernel" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">8af359a1ff7db7d7a082720e67257d69bf2a6c32b1c82f76c3dc71ca64dbdd9e</sum>
        </package>
        <package name="kernel-modules-core" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-modules-core-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">96dcc0bf4f492da2771368aba0c465a8c3446596108be0c218059d06ca24ff03</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-extra-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">9e191c74e5f1ef6d1ccef70a42818cf22e299263e1adecfb3977fa8284952d68</sum>
        </package>
        <package name="kernel-abi-stablelists" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-abi-stablelists-6.12.0-124.13.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">b077151f9d7e3b75c71f3c6a7c4f6de14bf8aa7e65e55703fc5841e41aa8e95a</sum>
        </package>
        <package name="kernel-core" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-core-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">c78c4d9cb815a91b1af9d33fb64be28a726f96366a2eb33189243628625a140f</sum>
        </package>
        <package name="kernel-debug-core" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-debug-core-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">f94384ca8a278c930dae7a2cafaf5122531e719ad040d79407f40eb6a99e2b60</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-6.12.0-124.13.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">fc54a284dd3f99d4e835755f929060c1aecb958984a4ca4650c16c4c8c51aba5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22395</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-15 12:44:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ublk: make sure ubq-&gt;canceling is set when queue is frozen (CVE-2025-22068)
  * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
  * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
  * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
  * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918)
  * kernel: i40e: fix idx validation in config queues msg (CVE-2025-39971)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22395" id="RHSA-2025:22395" type="rhsa" title="RHSA-2025:22395"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22068" id="CVE-2025-22068" type="cve" title="CVE-2025-22068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38724" id="CVE-2025-38724" type="cve" title="CVE-2025-38724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39883" id="CVE-2025-39883" type="cve" title="CVE-2025-39883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39898" id="CVE-2025-39898" type="cve" title="CVE-2025-39898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39918" id="CVE-2025-39918" type="cve" title="CVE-2025-39918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39971" id="CVE-2025-39971" type="cve" title="CVE-2025-39971"/>
      <reference href="https://bugzilla.redhat.com/2360225" id="2360225" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393172" id="2393172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397553" id="2397553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400598" id="2400598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400628" id="2400628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404108" id="2404108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22395.html" id="ALSA-2025:22395" type="self" title="ALSA-2025:22395"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="kernel-core" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-core-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">034998d5ce0b4990a38112705f3a7b25e127ecb44a3fd9b27088993b644fa51e</sum>
        </package>
        <package name="kernel-modules" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-modules-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">102b70c064ecc17239730ffa6eaf4332341b21060bc31d9d9de8470542607bad</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-core-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">1d949c63fff4cbf835d4cea8f8cd83923d54ec00aa0d621c9fe3f846ecaf655a</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">1ec1ebb3715a8874c9b4f98288198f61225969ceccf09662d3cf951d7160c973</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-extra-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">3e41aad9baa352f405a2aa48f0c2d45a8e06145c5526048a792334fd61c85b40</sum>
        </package>
        <package name="kernel-abi-stablelists" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-abi-stablelists-6.12.0-124.16.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">4fbf9878f69864efd870850519a80a432a604673b8125287cf8d48fd0b297860</sum>
        </package>
        <package name="kernel-zfcpdump-modules-core" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-core-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">514ce707341d95ecb8e0911c4a684b23e9f17b09dbda160181136f03181dbe6b</sum>
        </package>
        <package name="kernel" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">6a5153ce8e664ba4be6bb6afde305522ac79c66bebed55d90fdf4bdaa55a276b</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">710130bc27e5acc991882d2923276e74adfa3b4ed707fc01fc7f70f1369bfa09</sum>
        </package>
        <package name="kernel-modules-extra-matched" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-matched-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">7f5142153ce04f1b39f76ae61c368d8a88d5098b7ff400831719bcdcc2136838</sum>
        </package>
        <package name="kernel-zfcpdump" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">8d2249dc96b50952b8159aca4e0abe225eb82f01a7f9a07dcb0a3cc4f2c5e1f2</sum>
        </package>
        <package name="kernel-debug-modules-core" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-core-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">a1efee75b754b234bec6c7888f11f9cf761148acdba892803534daa26ad93e23</sum>
        </package>
        <package name="kernel-debug-core" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-debug-core-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">a753ec069e1498b01c4556499a15592ae59f59aae209b6cae1404429dc81b859</sum>
        </package>
        <package name="kernel-modules-core" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-modules-core-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">aacab92176e060aa8058340dde5ffed78f028eede4ff8b04fd94e147999f2747</sum>
        </package>
        <package name="kernel-modules-extra" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">af3554e1daf514bd681e5fee4bd149c7eb95cc35246251bec98d9227c70f9a27</sum>
        </package>
        <package name="kernel-tools" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-tools-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">b7ffbd4aa9ebf5590c4962a83a8e87b601936eb2dbaeaf8635da1dd9dbac9678</sum>
        </package>
        <package name="kernel-debug" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-debug-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">c0243ad9780279aea9d807be26ddb88ca62354fa0ea5c398315f63d4fa1ec891</sum>
        </package>
        <package name="kernel-debug-modules" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-6.12.0-124.16.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">f3aff7624715a2dfa85ac90901a0633a57f4360713f688e27eb65bc406b4d84f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22854</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-08 00:00:00"/>
    <updated date="2025-12-10 08:12:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cifs: Fix oops due to uninitialised variable (CVE-2025-38737)
  * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
  * kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CVE-2025-39982)
  * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979)
  * kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CVE-2025-39983)
  * kernel: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CVE-2025-40047)
  * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
  * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22854" id="RHSA-2025:22854" type="rhsa" title="RHSA-2025:22854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38737" id="CVE-2025-38737" type="cve" title="CVE-2025-38737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39925" id="CVE-2025-39925" type="cve" title="CVE-2025-39925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39979" id="CVE-2025-39979" type="cve" title="CVE-2025-39979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39981" id="CVE-2025-39981" type="cve" title="CVE-2025-39981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39982" id="CVE-2025-39982" type="cve" title="CVE-2025-39982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39983" id="CVE-2025-39983" type="cve" title="CVE-2025-39983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40047" id="CVE-2025-40047" type="cve" title="CVE-2025-40047"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40058" id="CVE-2025-40058" type="cve" title="CVE-2025-40058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40185" id="CVE-2025-40185" type="cve" title="CVE-2025-40185"/>
      <reference href="https://bugzilla.redhat.com/2393527" id="2393527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400629" id="2400629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404100" id="2404100" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404105" id="2404105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404109" id="2404109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404117" id="2404117" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406758" id="2406758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406776" id="2406776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414741" id="2414741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22854.html" id="ALSA-2025:22854" type="self" title="ALSA-2025:22854"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="kernel-zfcpdump-modules-core" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-core-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">054241e19c3b0464b304afe36b62f66fc5dffb7438d434fce67e6124fba3ffb4</sum>
        </package>
        <package name="kernel-modules-core" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-modules-core-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">23a720366abcdfa07bfccaf43e210d0475cd031520dc53941df0f5380248981a</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-core-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">29b3b59224dfa8793dd00d949781b5afaf4735d01a32a4521ef73d8fafa45828</sum>
        </package>
        <package name="kernel-debug-modules" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">2fbb34f9e8afb0d9e5386045741b0efe9c2031f9da3350cc12401ea677c94865</sum>
        </package>
        <package name="kernel-modules" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-modules-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">3034f4a3415230e606c07400c160d51b4fa635efb5270fd9482f91f50c424f5e</sum>
        </package>
        <package name="kernel-modules-extra" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">3aa3d85f3cc527e23ee888d0bff31a568d3e84419f09c98a2389366f8ac8a997</sum>
        </package>
        <package name="kernel-debug-modules-core" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-core-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">6aa5b37c34b09b4a120a6867aa0e25a192f26a852f0ebefcc37a998452a91dd7</sum>
        </package>
        <package name="kernel" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">8b2bddaa64375f770eddf67973ee98fc4015a59a614e4190195d40848a875d19</sum>
        </package>
        <package name="kernel-zfcpdump" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">9599bbb55835d7e4d7ad9158d6ebb4ff6667bcace05b500d985ff506061e3a31</sum>
        </package>
        <package name="kernel-core" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-core-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">a24606ffdf217a7674fe58ae7b5ac4501bcbae5b738657dd80242b25fe4e06ff</sum>
        </package>
        <package name="kernel-tools" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-tools-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">a84b6d8eb52b268b19fe554ecafd31ed3a414025717f6047a43e581800cc4e8e</sum>
        </package>
        <package name="kernel-abi-stablelists" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-abi-stablelists-6.12.0-124.20.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">b56185503a5dc7ef98a0a81b43587043379fbf72e7a72d4427591d519731f35e</sum>
        </package>
        <package name="kernel-debug-core" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-debug-core-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">b69b21fb351c918b9c7aab59d2900b3448350131730015487d8a71dafb8c8a2d</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">ca482774b1782eff75722b95b3ab7d98e664aa2c11964e4306a3f3d0bd95e825</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-extra-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">cbbafe45c4c1bdb235591c302e4753ddddf22e2212001b1a546282b256f1f540</sum>
        </package>
        <package name="kernel-modules-extra-matched" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-matched-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">d898222da571f5120539b94bdee09e247356bd1fb7c842e9d876039251c0add5</sum>
        </package>
        <package name="kernel-debug" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-debug-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">e58b4a79fe483b31813a628e2262df966c496508ea4025226e6e0d2c39015b0b</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-6.12.0-124.20.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">f4d0298041d514c0bbf31fc6d45871cc6649a45eed62d3228dd7a86d980bc747</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23279</id>
    <title>Important: kernel security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2026-01-05 20:25:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499)
  * kernel: net: tun: Update napi-&gt;skb after XDP process (CVE-2025-39984)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23279" id="RHSA-2025:23279" type="rhsa" title="RHSA-2025:23279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38499" id="CVE-2025-38499" type="cve" title="CVE-2025-38499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39984" id="CVE-2025-39984" type="cve" title="CVE-2025-39984"/>
      <reference href="https://bugzilla.redhat.com/2387670" id="2387670" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404111" id="2404111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23279.html" id="ALSA-2025:23279" type="self" title="ALSA-2025:23279"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="kernel-zfcpdump-modules-extra" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">04c36b79115ca81b15352f31ffcdb40ae377511193f318ba76daa4e21e299520</sum>
        </package>
        <package name="kernel-abi-stablelists" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-abi-stablelists-6.12.0-124.21.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">2a671ffe3e6864310a90820a0423d86706a735cb5603b3810881a362c633ff7b</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-core-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">2a71e3b8acb62b810ba0703ab67e4fcf41c9aab1085958905bd925eb4446c5d4</sum>
        </package>
        <package name="kernel-debug" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-debug-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">387db6901715ec2addab8648c26996e014a6b45d5417b7e74122f080f8169403</sum>
        </package>
        <package name="kernel-modules-extra-matched" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-matched-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">446ea01e8faac3dcc697601ea89e180b3ef232de52ad244c0d6c40fd222ba29a</sum>
        </package>
        <package name="kernel-modules-extra" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">495f0db351577f0b5b24bf15dd31681cd9b49f57d3c4f48ea54a8230a63e6d2c</sum>
        </package>
        <package name="kernel-zfcpdump-modules-core" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-core-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">5551ad768b3a903bc7151a51dac834ad39c6a8d509e75e9aca7dd47ab2e598f8</sum>
        </package>
        <package name="kernel-modules" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-modules-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">6a245d40dd6bd7b8d202d9ff7c9d8d412959ead17bad3d275e5915e1d6bb9658</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">8628cc8faab5c06ca9a9ebbd505f947f8028dcb48d521d5d1a19f7c7ad26c216</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-extra-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">946b9c38c0278d53736b8e8bcd32610ae8b4b7619e5365edcfe8535710b2e33a</sum>
        </package>
        <package name="kernel-modules-core" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-modules-core-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">959e3037526a68bf23978ec857154b997c60b82b3c87592b63247cae7b36c380</sum>
        </package>
        <package name="kernel-core" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-core-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">b9bb647a22f01d9b0ec9470839b23582116174b5d6c2c98f2c8cb86984ecbc96</sum>
        </package>
        <package name="kernel-debug-modules-core" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-core-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">cd36784545ca60092d6d03cc8526314b101b09c5b449a2a78e30f6ae37185d01</sum>
        </package>
        <package name="kernel-debug-core" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-debug-core-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">dd3da5c937801b18c695b8d864e900d10d27d31d54c3e14ab1944fd6e4cd45a3</sum>
        </package>
        <package name="kernel-zfcpdump" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">eb25433190f4438186fef45a5688b001a0238fbca8998d42f62176af97969a1b</sum>
        </package>
        <package name="kernel-tools" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-tools-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">ebdf431c4204174d9d8c35d91430862cc72bdc1d41ed6c3e4079ec477d973a15</sum>
        </package>
        <package name="kernel-debug-modules" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">f397f30885ccf48c6d9d6652c2aa5c8f33358b2145faac41e3750f76135f6590</sum>
        </package>
        <package name="kernel" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-6.12.0-124.21.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">fe03ccb514f5ca7de4dfbf4e1ecb59d76ec41a5cc2e670df3958ecd233f5e01e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23306</id>
    <title>Moderate: binutils security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:58:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>binutils security update</summary>
    <description>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.  

Security Fix(es):  

  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11082)
  * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23306" id="RHSA-2025:23306" type="rhsa" title="RHSA-2025:23306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11082" id="CVE-2025-11082" type="cve" title="CVE-2025-11082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11083" id="CVE-2025-11083" type="cve" title="CVE-2025-11083"/>
      <reference href="https://bugzilla.redhat.com/2399943" id="2399943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2399948" id="2399948" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23306.html" id="ALSA-2025:23306" type="self" title="ALSA-2025:23306"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="binutils-gold" version="2.41" release="58.el10_1.2.alma.1" epoch="0" arch="s390x" src="binutils-2.41-58.el10_1.2.alma.1.src.rpm">
          <filename>binutils-gold-2.41-58.el10_1.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">93c67f61162407fa3992f45f26ea4544ddc20498be1dad0bc51e474a0dd00237</sum>
        </package>
        <package name="binutils" version="2.41" release="58.el10_1.2.alma.1" epoch="0" arch="s390x" src="binutils-2.41-58.el10_1.2.alma.1.src.rpm">
          <filename>binutils-2.41-58.el10_1.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">eb46b1babe258a98f667cc4c148ffb40b26f39146efba0c853c9b410620c2a69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23479</id>
    <title>Moderate: openssh security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-21 20:05:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openssh security update</summary>
    <description>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984)
  * openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23479" id="RHSA-2025:23479" type="rhsa" title="RHSA-2025:23479"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61984" id="CVE-2025-61984" type="cve" title="CVE-2025-61984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61985" id="CVE-2025-61985" type="cve" title="CVE-2025-61985"/>
      <reference href="https://bugzilla.redhat.com/2401960" id="2401960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401962" id="2401962" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23479.html" id="ALSA-2025:23479" type="self" title="ALSA-2025:23479"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="openssh" version="9.9p1" release="12.el10_1.alma.1" epoch="0" arch="s390x" src="openssh-9.9p1-12.el10_1.alma.1.src.rpm">
          <filename>openssh-9.9p1-12.el10_1.alma.1.s390x.rpm</filename>
          <sum type="sha256">6509661772ef346ae8a0aa41b316d3c7e0dd2c0bc6b101b4a89eb55ef90a0618</sum>
        </package>
        <package name="openssh-server" version="9.9p1" release="12.el10_1.alma.1" epoch="0" arch="s390x" src="openssh-9.9p1-12.el10_1.alma.1.src.rpm">
          <filename>openssh-server-9.9p1-12.el10_1.alma.1.s390x.rpm</filename>
          <sum type="sha256">8a3b04accbd05113c277b7ce30ddf9f66efe45df45b3f8b8b4dc01421161746b</sum>
        </package>
        <package name="openssh-clients" version="9.9p1" release="12.el10_1.alma.1" epoch="0" arch="s390x" src="openssh-9.9p1-12.el10_1.alma.1.src.rpm">
          <filename>openssh-clients-9.9p1-12.el10_1.alma.1.s390x.rpm</filename>
          <sum type="sha256">a7c26f7bb023ce2d733b13bf8da95aa665a1d6d6e154d1857a94162ceea33e85</sum>
        </package>
        <package name="openssh-keycat" version="9.9p1" release="12.el10_1.alma.1" epoch="0" arch="s390x" src="openssh-9.9p1-12.el10_1.alma.1.src.rpm">
          <filename>openssh-keycat-9.9p1-12.el10_1.alma.1.s390x.rpm</filename>
          <sum type="sha256">dbf923440ebd673d9c474e9ef308011eedfa641ee19e583f433b8f26393911cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23484</id>
    <title>Moderate: libssh security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-21 19:50:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libssh security update</summary>
    <description>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  

Security Fix(es):  

  * libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend (CVE-2025-5987)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23484" id="RHSA-2025:23484" type="rhsa" title="RHSA-2025:23484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5987" id="CVE-2025-5987" type="cve" title="CVE-2025-5987"/>
      <reference href="https://bugzilla.redhat.com/2376219" id="2376219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23484.html" id="ALSA-2025:23484" type="self" title="ALSA-2025:23484"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="libssh-config" version="0.11.1" release="5.el10_1" epoch="0" arch="noarch" src="libssh-0.11.1-5.el10_1.src.rpm">
          <filename>libssh-config-0.11.1-5.el10_1.noarch.rpm</filename>
          <sum type="sha256">c7c3e9551fe91b46d03923f21625b20bfec339133dc661a21c183e84450c27e0</sum>
        </package>
        <package name="libssh" version="0.11.1" release="5.el10_1" epoch="0" arch="s390x" src="libssh-0.11.1-5.el10_1.src.rpm">
          <filename>libssh-0.11.1-5.el10_1.s390x.rpm</filename>
          <sum type="sha256">e8099eeebaf460b4e8287c8a30da6057256ae98eddf7b76339d8584419e63bf3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23940</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-23 05:59:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23940" id="RHSA-2025:23940" type="rhsa" title="RHSA-2025:23940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23940.html" id="ALSA-2025:23940" type="self" title="ALSA-2025:23940"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="python3" version="3.12.12" release="1.el10_1" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el10_1.src.rpm">
          <filename>python3-3.12.12-1.el10_1.s390x.rpm</filename>
          <sum type="sha256">b296016af4a07df542fbb39bed7f6ae065796dc2af0d48f76165ac5f1c0f8872</sum>
        </package>
        <package name="python3-libs" version="3.12.12" release="1.el10_1" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el10_1.src.rpm">
          <filename>python3-libs-3.12.12-1.el10_1.s390x.rpm</filename>
          <sum type="sha256">bd7485c0ebab6e9f649541729b47593b372276c15427929dea8082b77ca32136</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0002</id>
    <title>Moderate: tar security update</title>
    <issued date="2026-01-05 00:00:00"/>
    <updated date="2026-01-05 09:20:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>tar security update</summary>
    <description>The GNU tar program can save multiple files in an archive and restore files from an archive.  

Security Fix(es):  

  * tar: Tar path traversal (CVE-2025-45582)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0002" id="RHSA-2026:0002" type="rhsa" title="RHSA-2026:0002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-45582" id="CVE-2025-45582" type="cve" title="CVE-2025-45582"/>
      <reference href="https://bugzilla.redhat.com/2379592" id="2379592" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0002.html" id="ALSA-2026:0002" type="self" title="ALSA-2026:0002"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="tar" version="1.35" release="9.el10_1" epoch="2" arch="s390x" src="tar-1.35-9.el10_1.src.rpm">
          <filename>tar-1.35-9.el10_1.s390x.rpm</filename>
          <sum type="sha256">e691b8f5b0f672841bd4a9e89d0d276121c2bced03031322b21c18857d04f8e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0237</id>
    <title>Important: libpng security update</title>
    <issued date="2026-01-07 00:00:00"/>
    <updated date="2026-01-07 21:38:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libpng security update</summary>
    <description>The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files.  

Security Fix(es):  

  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)
  * libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0237" id="RHSA-2026:0237" type="rhsa" title="RHSA-2026:0237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66293" id="CVE-2025-66293" type="cve" title="CVE-2025-66293"/>
      <reference href="https://bugzilla.redhat.com/2416904" id="2416904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416907" id="2416907" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418711" id="2418711" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0237.html" id="ALSA-2026:0237" type="self" title="ALSA-2026:0237"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="libpng" version="1.6.40" release="8.el10_1.1" epoch="2" arch="s390x" src="libpng-1.6.40-8.el10_1.1.src.rpm">
          <filename>libpng-1.6.40-8.el10_1.1.s390x.rpm</filename>
          <sum type="sha256">f336f14a147a9de1cd7c4d52f35d6419fa6b648748525c6dc26bd386b1b7f653</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0453</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:27:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)
  * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840)
  * kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843)
  * kernel: net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CVE-2025-39905)
  * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)
  * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)
  * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)
  * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)
  * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0453" id="RHSA-2026:0453" type="rhsa" title="RHSA-2026:0453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39806" id="CVE-2025-39806" type="cve" title="CVE-2025-39806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39840" id="CVE-2025-39840" type="cve" title="CVE-2025-39840"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39843" id="CVE-2025-39843" type="cve" title="CVE-2025-39843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39905" id="CVE-2025-39905" type="cve" title="CVE-2025-39905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39966" id="CVE-2025-39966" type="cve" title="CVE-2025-39966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40176" id="CVE-2025-40176" type="cve" title="CVE-2025-40176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40240" id="CVE-2025-40240" type="cve" title="CVE-2025-40240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40277" id="CVE-2025-40277" type="cve" title="CVE-2025-40277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68287" id="CVE-2025-68287" type="cve" title="CVE-2025-68287"/>
      <reference href="https://bugzilla.redhat.com/2395807" id="2395807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396936" id="2396936" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396941" id="2396941" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400611" id="2400611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404107" id="2404107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414524" id="2414524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418832" id="2418832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419954" id="2419954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422788" id="2422788" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0453.html" id="ALSA-2026:0453" type="self" title="ALSA-2026:0453"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="kernel-debug-modules" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">08d30c1ddfafd7925268760713daf60d457c9b7f8a6e6005d8a7d5be972f39b8</sum>
        </package>
        <package name="kernel-abi-stablelists" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-abi-stablelists-6.12.0-124.27.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">1b65c0643152d5e18eca4d56dfe58a807013aeedb78ebd0a64d4b8d09a17c234</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-core-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">2b6be02e440143c0f3fe503c8f8c999a082fec1fffe33428f0f935cc70787321</sum>
        </package>
        <package name="kernel-debug-core" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-debug-core-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">3ce82507856bb60bfcb1f464f7bdf468811db7a28e71052119969316257726c2</sum>
        </package>
        <package name="kernel-zfcpdump" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">4427d034dd1fcd62d7ee384de83d27930271288146548e56fd03c2de44075176</sum>
        </package>
        <package name="kernel" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">46ded01522185ec7d409880e3798c65a9a4e9aa79f9d712e50bb562dc4f35205</sum>
        </package>
        <package name="kernel-modules-extra" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">4c1a74d9cb5520b955042d73102c8d92489d8bc288cb12c4f0bd4dd2b88f9ec3</sum>
        </package>
        <package name="kernel-modules-extra-matched" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-matched-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">60831e0e7fb75741b98d3ecaf9108e074541d7f7667d577781ad3f81479a896d</sum>
        </package>
        <package name="kernel-tools" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-tools-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">87ff98ad3b6556c32a7626f4b6a97f66195c916983678910dd2ffcead6dbb6eb</sum>
        </package>
        <package name="kernel-modules-core" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-modules-core-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">8a6272cc571d81e0d4298165dfa6ada3cadfebbb037b97e8e22b50af8b9b92a9</sum>
        </package>
        <package name="kernel-core" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-core-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">acdcfa47d10e41ede2ce6fcf94269451ae305817b981039bc7fd10d4575d5224</sum>
        </package>
        <package name="kernel-debug-modules-core" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-core-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">ade334d45a477324c44414112d530f4adb0e618fb70c335b682cf41ba72b4dc6</sum>
        </package>
        <package name="kernel-modules" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-modules-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">d262bc65d3895d3b8547caaba8cb0d1ffab4cc98512861adb1dc6c7b2dc758a4</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-extra-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">e594f388d85e7471b73358a694506d053aa68832876e745ac4eafaed020049c8</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">ed0cfb39f3267751e3d8c4e93a9dd40d1b51a65c0eff0dc4a12174e8fec4e231</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">ef3975cb5f4c8de5ea81d0f1038895a8d19e96c5590993bad8bc5a9918926b2d</sum>
        </package>
        <package name="kernel-debug" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-debug-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">f663caa23aa3b21f6fbc7129129c4f27b4b7d50681b4704f46c4f92ce3441e2d</sum>
        </package>
        <package name="kernel-zfcpdump-modules-core" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-core-6.12.0-124.27.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">fe00f1cd1944d0eddad802c7a9edcab294da34375bba3a4202dcc8c5eb3d4a83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0464</id>
    <title>Moderate: cups security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:20:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>cups security update</summary>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.  

Security Fix(es):  

  * CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915)
  * cups: Slow client communication leads to a possible DoS attack (CVE-2025-58436)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0464" id="RHSA-2026:0464" type="rhsa" title="RHSA-2026:0464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58436" id="CVE-2025-58436" type="cve" title="CVE-2025-58436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61915" id="CVE-2025-61915" type="cve" title="CVE-2025-61915"/>
      <reference href="https://bugzilla.redhat.com/2416039" id="2416039" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2416040" id="2416040" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0464.html" id="ALSA-2026:0464" type="self" title="ALSA-2026:0464"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="cups-filesystem" version="2.4.10" release="12.el10_1.2" epoch="1" arch="noarch" src="cups-2.4.10-12.el10_1.2.src.rpm">
          <filename>cups-filesystem-2.4.10-12.el10_1.2.noarch.rpm</filename>
          <sum type="sha256">2a2039a662a6fe9de47333d28b998bc81d16a0c388691c25aa0f7aeef35b878d</sum>
        </package>
        <package name="cups-libs" version="2.4.10" release="12.el10_1.2" epoch="1" arch="s390x" src="cups-2.4.10-12.el10_1.2.src.rpm">
          <filename>cups-libs-2.4.10-12.el10_1.2.s390x.rpm</filename>
          <sum type="sha256">94387f9e86a0c3ce54784eeb8221b6bd5b072ca732f2c0a71ae49ef5c622dda9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0594</id>
    <title>Moderate: libpq security update</title>
    <issued date="2026-01-14 00:00:00"/>
    <updated date="2026-01-16 15:02:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libpq security update</summary>
    <description>The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.   

Security Fix(es):  

  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0594" id="RHSA-2026:0594" type="rhsa" title="RHSA-2026:0594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0594.html" id="ALSA-2026:0594" type="self" title="ALSA-2026:0594"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="libpq" version="16.11" release="3.el10_1" epoch="0" arch="s390x" src="libpq-16.11-3.el10_1.src.rpm">
          <filename>libpq-16.11-3.el10_1.s390x.rpm</filename>
          <sum type="sha256">1f62df604454a0194d196dd3ac3ef433dcf0b90d3d1e7c46543172df559609b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0697</id>
    <title>Important: gnupg2 security update</title>
    <issued date="2026-01-15 00:00:00"/>
    <updated date="2026-01-16 08:52:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gnupg2 security update</summary>
    <description>The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.  

Security Fix(es):  

  * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0697" id="RHSA-2026:0697" type="rhsa" title="RHSA-2026:0697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68973" id="CVE-2025-68973" type="cve" title="CVE-2025-68973"/>
      <reference href="https://bugzilla.redhat.com/2425966" id="2425966" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0697.html" id="ALSA-2026:0697" type="self" title="ALSA-2026:0697"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="gnupg2" version="2.4.5" release="3.el10_1" epoch="0" arch="s390x" src="gnupg2-2.4.5-3.el10_1.src.rpm">
          <filename>gnupg2-2.4.5-3.el10_1.s390x.rpm</filename>
          <sum type="sha256">00d709dd5ceb5695f7a809d8d27e14e8fe17bea76e25cd2399151a662c4ca0cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0786</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-23 07:53:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0786" id="RHSA-2026:0786" type="rhsa" title="RHSA-2026:0786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68285" id="CVE-2025-68285" type="cve" title="CVE-2025-68285"/>
      <reference href="https://bugzilla.redhat.com/2422801" id="2422801" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0786.html" id="ALSA-2026:0786" type="self" title="ALSA-2026:0786"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="kernel-debug-core" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-debug-core-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">13c88e35cf412ec7e876f7f7d6d444eaaeeb65598885b48005798fd18d5dd37f</sum>
        </package>
        <package name="kernel-zfcpdump" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">14164901a9e4404b83ee41a109f1e8e4e73aff24aa287888038f647e4771622c</sum>
        </package>
        <package name="kernel-modules" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-modules-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">2b51e2d26689db6a6c6489552f60956dba65aad3813ec3e63783e188a2993d2f</sum>
        </package>
        <package name="kernel-modules-extra" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">2e7e3e9f2c95bc26f05a6b82a388964810ab906b67ef90092474caa04489096b</sum>
        </package>
        <package name="kernel-zfcpdump-modules-core" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-core-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">327e931217057884a23987b2216a67b67747eba8963f840b03369936aef618c7</sum>
        </package>
        <package name="kernel-debug" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-debug-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">4dbc30a1b684ece9d392e33476acca065e9670b766c647700b7ab9139ad9b692</sum>
        </package>
        <package name="kernel-debug-modules" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">506bdf9e3ff78483e11d3f6c1731396921fbf45adf908d7206cf0eaf5177539a</sum>
        </package>
        <package name="kernel-modules-extra-matched" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-modules-extra-matched-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">82c3b934a3a9c2a21a1efc20f2e2c52e8177337c211662a1d7b69c4b89b9cafb</sum>
        </package>
        <package name="kernel-zfcpdump-modules" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">a60f03ea07dda6a6c58d718a9839e99e74e842f17529a04908ff2b3680ec8867</sum>
        </package>
        <package name="kernel-tools" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-tools-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">aa55bc765ab7e309007e4700b566dcc2f16be6ceea5e9157569c08ee6676479b</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-extra-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">bb38314cd65d9b1f3211d2cb8c64fc6f298a8af041b0e0fa91035684871c0ab1</sum>
        </package>
        <package name="kernel-zfcpdump-modules-extra" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-modules-extra-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">bef16109240f3574cced0be0edfa20a7e4b3fd9999e33786defbe6b0f4765e81</sum>
        </package>
        <package name="kernel-zfcpdump-core" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-zfcpdump-core-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">c441ca54b5c0cc97357740107fd4ae9c16596fe3bf3a52dde045dc9f894ab13e</sum>
        </package>
        <package name="kernel-modules-core" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-modules-core-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">df530cb966f9e8a75318ddb744987cf35232d1b06efacb29603c2e6589dd0e9f</sum>
        </package>
        <package name="kernel-abi-stablelists" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="noarch" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-abi-stablelists-6.12.0-124.28.1.el10_1.noarch.rpm</filename>
          <sum type="sha256">e23bda9739de8f4c1ae97ac4a9d3e482a062e27b31b8d4f5ede83c37f8024c33</sum>
        </package>
        <package name="kernel" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">f087fdea159c2e7bb321e0dddd409078c3b4ea6410c4fe9504ec49e029ad80f5</sum>
        </package>
        <package name="kernel-debug-modules-core" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-debug-modules-core-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">f3ea404ba576b52c55de39ff8e39ed4481f71ffa68ec435686842b170da8aeb0</sum>
        </package>
        <package name="kernel-core" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="s390x" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-core-6.12.0-124.28.1.el10_1.s390x.rpm</filename>
          <sum type="sha256">ff248a6cc52a069d6cbd1dc57bb5f58dfebf14a0ff5844ce3685b87ecf59ac2b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0845</id>
    <title>Important: brotli security update</title>
    <issued date="2026-01-20 00:00:00"/>
    <updated date="2026-01-21 10:45:23"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>brotli security update</summary>
    <description>Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.   

Security Fix(es):  

  * Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS (CVE-2025-6176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0845" id="RHSA-2026:0845" type="rhsa" title="RHSA-2026:0845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6176" id="CVE-2025-6176" type="cve" title="CVE-2025-6176"/>
      <reference href="https://bugzilla.redhat.com/2408762" id="2408762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0845.html" id="ALSA-2026:0845" type="self" title="ALSA-2026:0845"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="libbrotli" version="1.1.0" release="7.el10_1" epoch="0" arch="s390x" src="brotli-1.1.0-7.el10_1.src.rpm">
          <filename>libbrotli-1.1.0-7.el10_1.s390x.rpm</filename>
          <sum type="sha256">b6e9a89dab4f9a42f658204e49d39bed381a9b49c05d3c1ac0276be87d84f898</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0975</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-23 23:34:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0975" id="RHSA-2026:0975" type="rhsa" title="RHSA-2026:0975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13601" id="CVE-2025-13601" type="cve" title="CVE-2025-13601"/>
      <reference href="https://bugzilla.redhat.com/2416741" id="2416741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0975.html" id="ALSA-2026:0975" type="self" title="ALSA-2026:0975"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="glib2" version="2.80.4" release="10.el10_1.12" epoch="0" arch="s390x" src="glib2-2.80.4-10.el10_1.12.src.rpm">
          <filename>glib2-2.80.4-10.el10_1.12.s390x.rpm</filename>
          <sum type="sha256">eb5918ceb871f78714a53e2df957e8a51a50f372af25284bf1d7e061626b0c11</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1086</id>
    <title>Important: python-urllib3 security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-26 13:16:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-urllib3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
  * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
  * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1086" id="RHSA-2026:1086" type="rhsa" title="RHSA-2026:1086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66418" id="CVE-2025-66418" type="cve" title="CVE-2025-66418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66471" id="CVE-2025-66471" type="cve" title="CVE-2025-66471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21441" id="CVE-2026-21441" type="cve" title="CVE-2026-21441"/>
      <reference href="https://bugzilla.redhat.com/2419455" id="2419455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419467" id="2419467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2427726" id="2427726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1086.html" id="ALSA-2026:1086" type="self" title="ALSA-2026:1086"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="python3-urllib3" version="1.26.19" release="2.el10_1.1" epoch="0" arch="noarch" src="python-urllib3-1.26.19-2.el10_1.1.src.rpm">
          <filename>python3-urllib3-1.26.19-2.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">bf0f21402205aa6e92224b45d8d0a5577bd6d724cb23b2de5a7e6c2a4c32f9f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1472</id>
    <title>Important: openssl security update</title>
    <issued date="2026-01-28 00:00:00"/>
    <updated date="2026-01-28 19:58:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openssl security update</summary>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  

Security Fix(es):  

  * openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file (CVE-2025-11187)
  * openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing (CVE-2025-15467)
  * openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling (CVE-2025-15468)
  * openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation (CVE-2025-15469)
  * openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression (CVE-2025-66199)
  * openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter (CVE-2025-68160)
  * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls (CVE-2025-69418)
  * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419)
  * openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing (CVE-2025-69421)
  * openssl: OpenSSL: Denial of Service via malformed TimeStamp Response (CVE-2025-69420)
  * openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing (CVE-2026-22795)
  * openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification (CVE-2026-22796)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1472" id="RHSA-2026:1472" type="rhsa" title="RHSA-2026:1472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11187" id="CVE-2025-11187" type="cve" title="CVE-2025-11187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15467" id="CVE-2025-15467" type="cve" title="CVE-2025-15467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15468" id="CVE-2025-15468" type="cve" title="CVE-2025-15468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15469" id="CVE-2025-15469" type="cve" title="CVE-2025-15469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-66199" id="CVE-2025-66199" type="cve" title="CVE-2025-66199"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68160" id="CVE-2025-68160" type="cve" title="CVE-2025-68160"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69418" id="CVE-2025-69418" type="cve" title="CVE-2025-69418"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69419" id="CVE-2025-69419" type="cve" title="CVE-2025-69419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69420" id="CVE-2025-69420" type="cve" title="CVE-2025-69420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-69421" id="CVE-2025-69421" type="cve" title="CVE-2025-69421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22795" id="CVE-2026-22795" type="cve" title="CVE-2026-22795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22796" id="CVE-2026-22796" type="cve" title="CVE-2026-22796"/>
      <reference href="https://bugzilla.redhat.com/2430375" id="2430375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430376" id="2430376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430377" id="2430377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430378" id="2430378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430379" id="2430379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430380" id="2430380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430381" id="2430381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430386" id="2430386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430387" id="2430387" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430388" id="2430388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430389" id="2430389" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430390" id="2430390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1472.html" id="ALSA-2026:1472" type="self" title="ALSA-2026:1472"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-s390x-baseos-rpms__10_0_default">
        <name>almalinux-10-for-s390x-baseos-rpms__10_0_default</name>
        <package name="openssl-libs" version="3.5.1" release="7.el10_1.alma.1" epoch="1" arch="s390x" src="openssl-3.5.1-7.el10_1.alma.1.src.rpm">
          <filename>openssl-libs-3.5.1-7.el10_1.alma.1.s390x.rpm</filename>
          <sum type="sha256">24e1c1dd7c66b58a81bf78130350c6afe650230fc55fee5f22b8091d1ecc0161</sum>
        </package>
        <package name="openssl" version="3.5.1" release="7.el10_1.alma.1" epoch="1" arch="s390x" src="openssl-3.5.1-7.el10_1.alma.1.src.rpm">
          <filename>openssl-3.5.1-7.el10_1.alma.1.s390x.rpm</filename>
          <sum type="sha256">a22560ca8a8aeb0e62890e27efab12b0d623ca3b3566230490d682007c5f6c28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>