<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20095</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:54:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  * kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)
  * kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)
  * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  * kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)
  * kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)
  * kernel: io_uring/sqpoll: zero sqd-&gt;thread on tctx errors (CVE-2025-21633)
  * kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)
  * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  * kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)
  * kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)
  * kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)
  * kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  * kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)
  * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  * kernel: pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0 (CVE-2025-21702)
  * kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)
  * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  * kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)
  * kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)
  * kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)
  * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  * kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)
  * kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)
  * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  * kernel: HID: multitouch: Add NULL check in mt_input_configured (CVE-2024-58020)
  * kernel: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition (CVE-2024-57984)
  * kernel: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (CVE-2025-21761)
  * kernel: sched_ext: Fix incorrect autogroup migration detection (CVE-2025-21771)
  * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981)
  * kernel: memcg: fix soft lockup in the OOM process (CVE-2024-57977)
  * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790)
  * kernel: usbnet: ipheth: fix DPE OoB read (CVE-2025-21741)
  * kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CVE-2025-21785)
  * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765)
  * kernel: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (CVE-2024-58006)
  * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012)
  * kernel: wifi: brcmfmac: Check the return value of of_property_read_string_index() (CVE-2025-21750)
  * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072)
  * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)
  * kernel: wifi: mac80211: prohibit deactivating all links (CVE-2024-58061)
  * kernel: idpf: convert workqueues to unbound (CVE-2024-58057)
  * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828)
  * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826)
  * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077)
  * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075)
  * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837)
  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: net/sched: cls_api: fix error handling causing NULL dereference (CVE-2025-21857)
  * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851)
  * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855)
  * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844)
  * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853)
  * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847)
  * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864)
  * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088)
  * kernel: acct: perform last write from workqueue (CVE-2025-21846)
  * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861)
  * kernel: io_uring: prevent opcode speculation (CVE-2025-21863)
  * kernel: fbdev: hyperv_fb: Allow graceful removal of framebuffer (CVE-2025-21976)
  * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056)
  * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749)
  * microcode_ctl: From CVEorg collector (CVE-2024-28956)
  * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994)
  * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116)
  * kernel: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (CVE-2025-38412)
  * kernel: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (CVE-2025-38369)
  * kernel: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (CVE-2025-38468)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20095" id="RHSA-2025:20095" type="rhsa" title="RHSA-2025:20095"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28956" id="CVE-2024-28956" type="cve" title="CVE-2024-28956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36350" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36357" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49570" id="CVE-2024-49570" type="cve" title="CVE-2024-49570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52332" id="CVE-2024-52332" type="cve" title="CVE-2024-52332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53147" id="CVE-2024-53147" type="cve" title="CVE-2024-53147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53216" id="CVE-2024-53216" type="cve" title="CVE-2024-53216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53222" id="CVE-2024-53222" type="cve" title="CVE-2024-53222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53241" id="CVE-2024-53241" type="cve" title="CVE-2024-53241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54456" id="CVE-2024-54456" type="cve" title="CVE-2024-54456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56662" id="CVE-2024-56662" type="cve" title="CVE-2024-56662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56675" id="CVE-2024-56675" type="cve" title="CVE-2024-56675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56690" id="CVE-2024-56690" type="cve" title="CVE-2024-56690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57901" id="CVE-2024-57901" type="cve" title="CVE-2024-57901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57902" id="CVE-2024-57902" type="cve" title="CVE-2024-57902"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57941" id="CVE-2024-57941" type="cve" title="CVE-2024-57941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57942" id="CVE-2024-57942" type="cve" title="CVE-2024-57942"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57977" id="CVE-2024-57977" type="cve" title="CVE-2024-57977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57981" id="CVE-2024-57981" type="cve" title="CVE-2024-57981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57984" id="CVE-2024-57984" type="cve" title="CVE-2024-57984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57986" id="CVE-2024-57986" type="cve" title="CVE-2024-57986"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57987" id="CVE-2024-57987" type="cve" title="CVE-2024-57987"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57988" id="CVE-2024-57988" type="cve" title="CVE-2024-57988"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57989" id="CVE-2024-57989" type="cve" title="CVE-2024-57989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57995" id="CVE-2024-57995" type="cve" title="CVE-2024-57995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58004" id="CVE-2024-58004" type="cve" title="CVE-2024-58004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58005" id="CVE-2024-58005" type="cve" title="CVE-2024-58005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58006" id="CVE-2024-58006" type="cve" title="CVE-2024-58006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58012" id="CVE-2024-58012" type="cve" title="CVE-2024-58012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58013" id="CVE-2024-58013" type="cve" title="CVE-2024-58013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58014" id="CVE-2024-58014" type="cve" title="CVE-2024-58014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58015" id="CVE-2024-58015" type="cve" title="CVE-2024-58015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58020" id="CVE-2024-58020" type="cve" title="CVE-2024-58020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58057" id="CVE-2024-58057" type="cve" title="CVE-2024-58057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58061" id="CVE-2024-58061" type="cve" title="CVE-2024-58061"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58069" id="CVE-2024-58069" type="cve" title="CVE-2024-58069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58072" id="CVE-2024-58072" type="cve" title="CVE-2024-58072"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58075" id="CVE-2024-58075" type="cve" title="CVE-2024-58075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58077" id="CVE-2024-58077" type="cve" title="CVE-2024-58077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58088" id="CVE-2024-58088" type="cve" title="CVE-2024-58088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21633" id="CVE-2025-21633" type="cve" title="CVE-2025-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21647" id="CVE-2025-21647" type="cve" title="CVE-2025-21647"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21652" id="CVE-2025-21652" type="cve" title="CVE-2025-21652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21655" id="CVE-2025-21655" type="cve" title="CVE-2025-21655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21671" id="CVE-2025-21671" type="cve" title="CVE-2025-21671"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21680" id="CVE-2025-21680" type="cve" title="CVE-2025-21680"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21691" id="CVE-2025-21691" type="cve" title="CVE-2025-21691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21693" id="CVE-2025-21693" type="cve" title="CVE-2025-21693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21696" id="CVE-2025-21696" type="cve" title="CVE-2025-21696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21702" id="CVE-2025-21702" type="cve" title="CVE-2025-21702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21726" id="CVE-2025-21726" type="cve" title="CVE-2025-21726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21732" id="CVE-2025-21732" type="cve" title="CVE-2025-21732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21738" id="CVE-2025-21738" type="cve" title="CVE-2025-21738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21741" id="CVE-2025-21741" type="cve" title="CVE-2025-21741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21742" id="CVE-2025-21742" type="cve" title="CVE-2025-21742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21743" id="CVE-2025-21743" type="cve" title="CVE-2025-21743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21750" id="CVE-2025-21750" type="cve" title="CVE-2025-21750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21761" id="CVE-2025-21761" type="cve" title="CVE-2025-21761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21765" id="CVE-2025-21765" type="cve" title="CVE-2025-21765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21771" id="CVE-2025-21771" type="cve" title="CVE-2025-21771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21777" id="CVE-2025-21777" type="cve" title="CVE-2025-21777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21785" id="CVE-2025-21785" type="cve" title="CVE-2025-21785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21786" id="CVE-2025-21786" type="cve" title="CVE-2025-21786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21790" id="CVE-2025-21790" type="cve" title="CVE-2025-21790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21791" id="CVE-2025-21791" type="cve" title="CVE-2025-21791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21795" id="CVE-2025-21795" type="cve" title="CVE-2025-21795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21796" id="CVE-2025-21796" type="cve" title="CVE-2025-21796"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21826" id="CVE-2025-21826" type="cve" title="CVE-2025-21826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21828" id="CVE-2025-21828" type="cve" title="CVE-2025-21828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21837" id="CVE-2025-21837" type="cve" title="CVE-2025-21837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21844" id="CVE-2025-21844" type="cve" title="CVE-2025-21844"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21846" id="CVE-2025-21846" type="cve" title="CVE-2025-21846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21847" id="CVE-2025-21847" type="cve" title="CVE-2025-21847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21851" id="CVE-2025-21851" type="cve" title="CVE-2025-21851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21853" id="CVE-2025-21853" type="cve" title="CVE-2025-21853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21855" id="CVE-2025-21855" type="cve" title="CVE-2025-21855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21857" id="CVE-2025-21857" type="cve" title="CVE-2025-21857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21861" id="CVE-2025-21861" type="cve" title="CVE-2025-21861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21863" id="CVE-2025-21863" type="cve" title="CVE-2025-21863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21864" id="CVE-2025-21864" type="cve" title="CVE-2025-21864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21976" id="CVE-2025-21976" type="cve" title="CVE-2025-21976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22056" id="CVE-2025-22056" type="cve" title="CVE-2025-22056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37749" id="CVE-2025-37749" type="cve" title="CVE-2025-37749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37994" id="CVE-2025-37994" type="cve" title="CVE-2025-37994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38116" id="CVE-2025-38116" type="cve" title="CVE-2025-38116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38369" id="CVE-2025-38369" type="cve" title="CVE-2025-38369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38412" id="CVE-2025-38412" type="cve" title="CVE-2025-38412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38468" id="CVE-2025-38468" type="cve" title="CVE-2025-38468"/>
      <reference href="https://bugzilla.redhat.com/2331326" id="2331326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2333985" id="2333985" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334373" id="2334373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334415" id="2334415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334547" id="2334547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334548" id="2334548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334676" id="2334676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337121" id="2337121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338185" id="2338185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338211" id="2338211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338813" id="2338813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338821" id="2338821" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338828" id="2338828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338998" id="2338998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339130" id="2339130" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339141" id="2339141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343172" id="2343172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343186" id="2343186" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344684" id="2344684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344687" id="2344687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345240" id="2345240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346272" id="2346272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348522" id="2348522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348523" id="2348523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348541" id="2348541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348543" id="2348543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348547" id="2348547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348550" id="2348550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348556" id="2348556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348561" id="2348561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348567" id="2348567" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348572" id="2348572" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348574" id="2348574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348577" id="2348577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348581" id="2348581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348584" id="2348584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348587" id="2348587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348590" id="2348590" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348592" id="2348592" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348593" id="2348593" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348595" id="2348595" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348597" id="2348597" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348600" id="2348600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348601" id="2348601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348602" id="2348602" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348603" id="2348603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348612" id="2348612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348617" id="2348617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348620" id="2348620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348621" id="2348621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348625" id="2348625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348629" id="2348629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348630" id="2348630" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348645" id="2348645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348647" id="2348647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348650" id="2348650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348656" id="2348656" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350363" id="2350363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350364" id="2350364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350373" id="2350373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350375" id="2350375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350386" id="2350386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350392" id="2350392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350396" id="2350396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350397" id="2350397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350589" id="2350589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351605" id="2351605" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351606" id="2351606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351608" id="2351608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351612" id="2351612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351613" id="2351613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351616" id="2351616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351618" id="2351618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351620" id="2351620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351624" id="2351624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351625" id="2351625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351629" id="2351629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356664" id="2356664" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360215" id="2360215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363332" id="2363332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366125" id="2366125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369184" id="2369184" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376076" id="2376076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383398" id="2383398" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383432" id="2383432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383913" id="2383913" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20095.html" id="ALSA-2025:20095" type="self" title="ALSA-2025:20095"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.8.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">3152779504b2a67b9ec8456088e403b1b0850d04b5443dc4987c7aa4a187d194</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.8.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">62b055e42d11800616f8db86385574369114abc7c19a5c3cc37750bd54297f59</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.8.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">7b3dbac1fdd47edd245f7dda9b8b103c6456471c2729c2f7d9759811fd752bb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20145</id>
    <title>Low: shadow-utils security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:50:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>shadow-utils security update</summary>
    <description>The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts.   

Security Fix(es):  

  * shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise (CVE-2024-56433)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20145" id="RHSA-2025:20145" type="rhsa" title="RHSA-2025:20145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56433" id="CVE-2024-56433" type="cve" title="CVE-2024-56433"/>
      <reference href="https://bugzilla.redhat.com/2334165" id="2334165" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20145.html" id="ALSA-2025:20145" type="self" title="ALSA-2025:20145"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="shadow-utils-subid-devel" version="4.15.0" release="8.el10" epoch="2" arch="x86_64" src="shadow-utils-4.15.0-8.el10.src.rpm">
          <filename>shadow-utils-subid-devel-4.15.0-8.el10.x86_64.rpm</filename>
          <sum type="sha256">f60c5489f5c3aafb587e2809c8d9779cbca990cae9d68ce7542c786a1d12884f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20478</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:49:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zziplib security update</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.  

Security Fix(es):  

  * zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20478" id="RHSA-2025:20478" type="rhsa" title="RHSA-2025:20478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2018-17828" id="CVE-2018-17828" type="cve" title="CVE-2018-17828"/>
      <reference href="https://bugzilla.redhat.com/1635888" id="1635888" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20478.html" id="ALSA-2025:20478" type="self" title="ALSA-2025:20478"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="zziplib-devel" version="0.13.78" release="2.el10" epoch="0" arch="x86_64" src="zziplib-0.13.78-2.el10.src.rpm">
          <filename>zziplib-devel-0.13.78-2.el10.x86_64.rpm</filename>
          <sum type="sha256">acf190b32349c0563e6e36a91ce1b9edcfd27aa8f1c84db7853d39e67e3e0b67</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20983</id>
    <title>Important: podman security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-25 10:54:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * database/sql: Postgres Scan Race Condition (CVE-2025-47907)
  * podman: Podman kube play command may overwrite host files (CVE-2025-9566)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20983" id="RHSA-2025:20983" type="rhsa" title="RHSA-2025:20983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47907" id="CVE-2025-47907" type="cve" title="CVE-2025-47907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9566" id="CVE-2025-9566" type="cve" title="CVE-2025-9566"/>
      <reference href="https://bugzilla.redhat.com/2387083" id="2387083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393152" id="2393152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20983.html" id="ALSA-2025:20983" type="self" title="ALSA-2025:20983"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="podman-tests" version="5.6.0" release="5.el10_1" epoch="7" arch="x86_64" src="podman-5.6.0-5.el10_1.src.rpm">
          <filename>podman-tests-5.6.0-5.el10_1.x86_64.rpm</filename>
          <sum type="sha256">21cf1b7e72b7b6f2e9d9c72530ccb1ed72c20b4da671af09b24e3af09884d524</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20994</id>
    <title>Important: ipa security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-05 09:05:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  

Security Fix(es):  

  * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20994" id="RHSA-2025:20994" type="rhsa" title="RHSA-2025:20994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7493" id="CVE-2025-7493" type="cve" title="CVE-2025-7493"/>
      <reference href="https://bugzilla.redhat.com/2389448" id="2389448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20994.html" id="ALSA-2025:20994" type="self" title="ALSA-2025:20994"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="python3-ipatests" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>python3-ipatests-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">3e3662f048ff47584d06f1f56b5ec7d326b91747469a6343ade29d870ef96426</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20998</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:51:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20998" id="RHSA-2025:20998" type="rhsa" title="RHSA-2025:20998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20998.html" id="ALSA-2025:20998" type="self" title="ALSA-2025:20998"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="libtiff-tools" version="4.6.0" release="6.el10_1.1" epoch="0" arch="x86_64" src="libtiff-4.6.0-6.el10_1.1.src.rpm">
          <filename>libtiff-tools-4.6.0-6.el10_1.1.x86_64.rpm</filename>
          <sum type="sha256">416c97b65038cb36e75072ecbcb18640f7da6ea8731e46911edadd7bedde3629</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21020</id>
    <title>Important: sssd security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2026-01-14 12:41:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.  

Security Fix(es):  

  * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21020" id="RHSA-2025:21020" type="rhsa" title="RHSA-2025:21020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11561" id="CVE-2025-11561" type="cve" title="CVE-2025-11561"/>
      <reference href="https://bugzilla.redhat.com/2402727" id="2402727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21020.html" id="ALSA-2025:21020" type="self" title="ALSA-2025:21020"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="libsss_nss_idmap-devel" version="2.11.1" release="2.el10_1.1" epoch="0" arch="x86_64" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>libsss_nss_idmap-devel-2.11.1-2.el10_1.1.x86_64.rpm</filename>
          <sum type="sha256">59660a22898328fa05ba3046ef659c47b81c6a5ef0336518c2f083ecf93317c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21032</id>
    <title>Important: libsoup3 security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:58:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)
  * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21032" id="RHSA-2025:21032" type="rhsa" title="RHSA-2025:21032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11021" id="CVE-2025-11021" type="cve" title="CVE-2025-11021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4945" id="CVE-2025-4945" type="cve" title="CVE-2025-4945"/>
      <reference href="https://bugzilla.redhat.com/2367175" id="2367175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2399627" id="2399627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21032.html" id="ALSA-2025:21032" type="self" title="ALSA-2025:21032"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="libsoup3-doc" version="3.6.5" release="3.el10_1.6" epoch="0" arch="noarch" src="libsoup3-3.6.5-3.el10_1.6.src.rpm">
          <filename>libsoup3-doc-3.6.5-3.el10_1.6.noarch.rpm</filename>
          <sum type="sha256">bd42e9eaccb41b75d1047d4f6d5f5fcfcae47111384297589689627ad1fb0b16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21034</id>
    <title>Important: bind security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 09:00:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21034" id="RHSA-2025:21034" type="rhsa" title="RHSA-2025:21034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8677" id="CVE-2025-8677" type="cve" title="CVE-2025-8677"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405830" id="2405830" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21034.html" id="ALSA-2025:21034" type="self" title="ALSA-2025:21034"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="bind-doc" version="9.18.33" release="10.el10_1.2" epoch="32" arch="noarch" src="bind-9.18.33-10.el10_1.2.src.rpm">
          <filename>bind-doc-9.18.33-10.el10_1.2.noarch.rpm</filename>
          <sum type="sha256">14fe04b80ca60cf08295b2d4c7453ec62c4218f8f7033648c849ab00bfaa830a</sum>
        </package>
        <package name="bind-devel" version="9.18.33" release="10.el10_1.2" epoch="32" arch="x86_64" src="bind-9.18.33-10.el10_1.2.src.rpm">
          <filename>bind-devel-9.18.33-10.el10_1.2.x86_64.rpm</filename>
          <sum type="sha256">2fd62eb56a18b474f1a8a7021f4363d234876313d15df9fa843a0815dd74be65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21035</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 09:01:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21035" id="RHSA-2025:21035" type="rhsa" title="RHSA-2025:21035"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21035.html" id="ALSA-2025:21035" type="self" title="ALSA-2025:21035"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="xorg-x11-server-Xwayland-devel" version="24.1.5" release="5.el10_1" epoch="0" arch="x86_64" src="xorg-x11-server-Xwayland-24.1.5-5.el10_1.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-24.1.5-5.el10_1.x86_64.rpm</filename>
          <sum type="sha256">24c171f55db12b9b4e2b847c156d970071884129e16e7163b4d609fa3a31115e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21038</id>
    <title>Important: kea security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-05 08:28:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kea security update</summary>
    <description>DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers support DNS Update mechanism, using stand-alone DDNS daemon.  

Security Fix(es):  

  * kea: Invalid characters cause assert (CVE-2025-11232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21038" id="RHSA-2025:21038" type="rhsa" title="RHSA-2025:21038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11232" id="CVE-2025-11232" type="cve" title="CVE-2025-11232"/>
      <reference href="https://bugzilla.redhat.com/2407178" id="2407178" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21038.html" id="ALSA-2025:21038" type="self" title="ALSA-2025:21038"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="kea-keama" version="3.0.1" release="2.el10_1" epoch="0" arch="x86_64" src="kea-3.0.1-2.el10_1.src.rpm">
          <filename>kea-keama-3.0.1-2.el10_1.x86_64.rpm</filename>
          <sum type="sha256">e870a939d2764535ffb74170ea91daad53690a6672d050c24e95b40f8614b2a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21220</id>
    <title>Important: podman security update</title>
    <issued date="2025-11-13 00:00:00"/>
    <updated date="2025-11-25 10:44:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21220" id="RHSA-2025:21220" type="rhsa" title="RHSA-2025:21220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52881" id="CVE-2025-52881" type="cve" title="CVE-2025-52881"/>
      <reference href="https://bugzilla.redhat.com/2404715" id="2404715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21220.html" id="ALSA-2025:21220" type="self" title="ALSA-2025:21220"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="podman-tests" version="5.6.0" release="6.el10_1" epoch="7" arch="x86_64" src="podman-5.6.0-6.el10_1.src.rpm">
          <filename>podman-tests-5.6.0-6.el10_1.x86_64.rpm</filename>
          <sum type="sha256">8ba94ed46081b45836b5cdf5d008d3348406784db701f7b33ad12bd5df97aaa0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21931</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-12-05 08:40:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CVE-2025-39730)
  * kernel: tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect() (CVE-2025-39955)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21931" id="RHSA-2025:21931" type="rhsa" title="RHSA-2025:21931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39730" id="CVE-2025-39730" type="cve" title="CVE-2025-39730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39955" id="CVE-2025-39955" type="cve" title="CVE-2025-39955"/>
      <reference href="https://bugzilla.redhat.com/2393731" id="2393731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402699" id="2402699" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21931.html" id="ALSA-2025:21931" type="self" title="ALSA-2025:21931"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="kernel-cross-headers" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.13.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">16661c93b58d812c02075855658cc6146e76fa0ee728fbd30e3bb615d5166fe7</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.13.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">47cee9164c1124995899414d3067a5824a641da5bd0db4e9150332bd6fb0f2eb</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.13.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">d8be38bf18014265d55650450e017b04ba85f2869fab16ba60fe0f2eda243e6b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22361</id>
    <title>Moderate: qt6-qtquick3d security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-05 07:43:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt6-qtquick3d security update</summary>
    <description>The Qt 6 Quick3D library.  

Security Fix(es):  

  * assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow (CVE-2025-11277)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22361" id="RHSA-2025:22361" type="rhsa" title="RHSA-2025:22361"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11277" id="CVE-2025-11277" type="cve" title="CVE-2025-11277"/>
      <reference href="https://bugzilla.redhat.com/2401622" id="2401622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22361.html" id="ALSA-2025:22361" type="self" title="ALSA-2025:22361"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="qt6-qtquick3d-examples" version="6.9.1" release="1.el10_1.1" epoch="0" arch="x86_64" src="qt6-qtquick3d-6.9.1-1.el10_1.1.src.rpm">
          <filename>qt6-qtquick3d-examples-6.9.1-1.el10_1.1.x86_64.rpm</filename>
          <sum type="sha256">e950b1a9dc62a3b3a88d31c40ac3be82e9ed35437d2d4de2894b5755d70786fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22394</id>
    <title>Moderate: qt6-qtsvg security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-05 07:42:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt6-qtsvg security update</summary>
    <description>Scalable Vector Graphics (SVG) is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices.  

Security Fix(es):  

  * qtsvg: Uncontrolled recursion in Qt SVG module (CVE-2025-10728)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22394" id="RHSA-2025:22394" type="rhsa" title="RHSA-2025:22394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10728" id="CVE-2025-10728" type="cve" title="CVE-2025-10728"/>
      <reference href="https://bugzilla.redhat.com/2401244" id="2401244" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22394.html" id="ALSA-2025:22394" type="self" title="ALSA-2025:22394"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="qt6-qtsvg-examples" version="6.9.1" release="2.el10_1.2" epoch="0" arch="x86_64" src="qt6-qtsvg-6.9.1-2.el10_1.2.src.rpm">
          <filename>qt6-qtsvg-examples-6.9.1-2.el10_1.2.x86_64.rpm</filename>
          <sum type="sha256">f5150b19e1d64e55fb0360f55c4e180b0be2e8c3e4f13379be01cc7e5cb1e019</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22395</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-15 12:44:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ublk: make sure ubq-&gt;canceling is set when queue is frozen (CVE-2025-22068)
  * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
  * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
  * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
  * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918)
  * kernel: i40e: fix idx validation in config queues msg (CVE-2025-39971)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22395" id="RHSA-2025:22395" type="rhsa" title="RHSA-2025:22395"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22068" id="CVE-2025-22068" type="cve" title="CVE-2025-22068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38724" id="CVE-2025-38724" type="cve" title="CVE-2025-38724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39883" id="CVE-2025-39883" type="cve" title="CVE-2025-39883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39898" id="CVE-2025-39898" type="cve" title="CVE-2025-39898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39918" id="CVE-2025-39918" type="cve" title="CVE-2025-39918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39971" id="CVE-2025-39971" type="cve" title="CVE-2025-39971"/>
      <reference href="https://bugzilla.redhat.com/2360225" id="2360225" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393172" id="2393172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397553" id="2397553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400598" id="2400598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400628" id="2400628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404108" id="2404108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22395.html" id="ALSA-2025:22395" type="self" title="ALSA-2025:22395"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.16.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">56d7fec7d95bc01d9fb84e3d49d86af3ac0e2e1ac977dfcbf78764d4aa641a63</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.16.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">b555041402bf8f1d9059124440cfa0ea2d93f3d22812287cd1cf2392c37540d6</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.16.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">c192219fa798e17f8a1e6b462cfc933a1588b696d87634997c5969234d9c6e3c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22854</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-08 00:00:00"/>
    <updated date="2025-12-10 08:12:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cifs: Fix oops due to uninitialised variable (CVE-2025-38737)
  * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
  * kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CVE-2025-39982)
  * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979)
  * kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CVE-2025-39983)
  * kernel: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CVE-2025-40047)
  * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
  * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22854" id="RHSA-2025:22854" type="rhsa" title="RHSA-2025:22854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38737" id="CVE-2025-38737" type="cve" title="CVE-2025-38737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39925" id="CVE-2025-39925" type="cve" title="CVE-2025-39925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39979" id="CVE-2025-39979" type="cve" title="CVE-2025-39979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39981" id="CVE-2025-39981" type="cve" title="CVE-2025-39981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39982" id="CVE-2025-39982" type="cve" title="CVE-2025-39982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39983" id="CVE-2025-39983" type="cve" title="CVE-2025-39983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40047" id="CVE-2025-40047" type="cve" title="CVE-2025-40047"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40058" id="CVE-2025-40058" type="cve" title="CVE-2025-40058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40185" id="CVE-2025-40185" type="cve" title="CVE-2025-40185"/>
      <reference href="https://bugzilla.redhat.com/2393527" id="2393527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400629" id="2400629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404100" id="2404100" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404105" id="2404105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404109" id="2404109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404117" id="2404117" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406758" id="2406758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406776" id="2406776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414741" id="2414741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22854.html" id="ALSA-2025:22854" type="self" title="ALSA-2025:22854"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.20.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">648c2321b5e77acbb7ab32e16dff30576e35db03b1a5a43ce49961ca890be2da</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.20.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">6855c1cb088b456089465993ebd2eb1c6d3f093d5d0bb4b03d4c605b640c7f25</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.20.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">d08835645a0584effcef0e29efa7efcf51f62abe5d633aebf33745b82ceeff5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23008</id>
    <title>Moderate: mysql8.4 security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-12 10:13:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.  

Security Fix(es):  

  * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
  * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23008" id="RHSA-2025:23008" type="rhsa" title="RHSA-2025:23008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53040" id="CVE-2025-53040" type="cve" title="CVE-2025-53040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53042" id="CVE-2025-53042" type="cve" title="CVE-2025-53042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53044" id="CVE-2025-53044" type="cve" title="CVE-2025-53044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53045" id="CVE-2025-53045" type="cve" title="CVE-2025-53045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53053" id="CVE-2025-53053" type="cve" title="CVE-2025-53053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53054" id="CVE-2025-53054" type="cve" title="CVE-2025-53054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53062" id="CVE-2025-53062" type="cve" title="CVE-2025-53062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53069" id="CVE-2025-53069" type="cve" title="CVE-2025-53069"/>
      <reference href="https://bugzilla.redhat.com/2405486" id="2405486" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405491" id="2405491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405511" id="2405511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405514" id="2405514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405523" id="2405523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405534" id="2405534" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405541" id="2405541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405544" id="2405544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23008.html" id="ALSA-2025:23008" type="self" title="ALSA-2025:23008"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="mysql8.4-test-data" version="8.4.7" release="1.el10_1" epoch="0" arch="noarch" src="mysql8.4-8.4.7-1.el10_1.src.rpm">
          <filename>mysql8.4-test-data-8.4.7-1.el10_1.noarch.rpm</filename>
          <sum type="sha256">308864d516d16c4e302797a701e15826a01fa581d1dd9b23daed92618465f9b9</sum>
        </package>
        <package name="mysql8.4-test" version="8.4.7" release="1.el10_1" epoch="0" arch="x86_64" src="mysql8.4-8.4.7-1.el10_1.src.rpm">
          <filename>mysql8.4-test-8.4.7-1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">aa514a21b2e230f799abff619c03640a5411350c20679d9ce356e37ded4ca722</sum>
        </package>
        <package name="mysql8.4-devel" version="8.4.7" release="1.el10_1" epoch="0" arch="x86_64" src="mysql8.4-8.4.7-1.el10_1.src.rpm">
          <filename>mysql8.4-devel-8.4.7-1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">f3f71f55a7f8ec3c376ae952ab0e97816752fae9b532f57c7b404b75010965c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23083</id>
    <title>Important: wireshark security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-12 10:17:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.  

Security Fix(es):  

  * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23083" id="RHSA-2025:23083" type="rhsa" title="RHSA-2025:23083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13499" id="CVE-2025-13499" type="cve" title="CVE-2025-13499"/>
      <reference href="https://bugzilla.redhat.com/2416293" id="2416293" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23083.html" id="ALSA-2025:23083" type="self" title="ALSA-2025:23083"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="wireshark-devel" version="4.4.2" release="4.el10_1.1" epoch="1" arch="x86_64" src="wireshark-4.4.2-4.el10_1.1.src.rpm">
          <filename>wireshark-devel-4.4.2-4.el10_1.1.x86_64.rpm</filename>
          <sum type="sha256">3869e1e4494089064a86bfb23c2c92e32d8cedd5b247322ef7bc1743e6e6e764</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23139</id>
    <title>Moderate: libsoup3 security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:26:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion (CVE-2025-12105)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23139" id="RHSA-2025:23139" type="rhsa" title="RHSA-2025:23139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12105" id="CVE-2025-12105" type="cve" title="CVE-2025-12105"/>
      <reference href="https://bugzilla.redhat.com/2405992" id="2405992" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23139.html" id="ALSA-2025:23139" type="self" title="ALSA-2025:23139"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="libsoup3-doc" version="3.6.5" release="3.el10_1.7" epoch="0" arch="noarch" src="libsoup3-3.6.5-3.el10_1.7.src.rpm">
          <filename>libsoup3-doc-3.6.5-3.el10_1.7.noarch.rpm</filename>
          <sum type="sha256">92cdf9ad06b1c825280250ae11fd29775dd0a3a51cedad09418ace68e66b2555</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23141</id>
    <title>Moderate: ruby security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2026-01-05 20:34:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * resolv: Denial of Service in resolv gem (CVE-2025-24294)
  * rexml: REXML denial of service (CVE-2025-58767)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23141" id="RHSA-2025:23141" type="rhsa" title="RHSA-2025:23141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24294" id="CVE-2025-24294" type="cve" title="CVE-2025-24294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58767" id="CVE-2025-58767" type="cve" title="CVE-2025-58767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61594" id="CVE-2025-61594" type="cve" title="CVE-2025-61594"/>
      <reference href="https://bugzilla.redhat.com/2379684" id="2379684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396186" id="2396186" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23141.html" id="ALSA-2025:23141" type="self" title="ALSA-2025:23141"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="ruby-doc" version="3.3.10" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>ruby-doc-3.3.10-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">e35f1f991e04d33080e059b4f79a5a67752afca15d20fd0cbd8e3b7cf6c5a4b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23279</id>
    <title>Important: kernel security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2026-01-05 20:25:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499)
  * kernel: net: tun: Update napi-&gt;skb after XDP process (CVE-2025-39984)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23279" id="RHSA-2025:23279" type="rhsa" title="RHSA-2025:23279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38499" id="CVE-2025-38499" type="cve" title="CVE-2025-38499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39984" id="CVE-2025-39984" type="cve" title="CVE-2025-39984"/>
      <reference href="https://bugzilla.redhat.com/2387670" id="2387670" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404111" id="2404111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23279.html" id="ALSA-2025:23279" type="self" title="ALSA-2025:23279"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.21.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">1a0f655a2eda49050393eddedd68060243eacf28619c3a3128d35428a566f5ed</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.21.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">aa30663a96c4b8a6c100682134e004d5abad89328886cf037940994ee2061594</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.21.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">c751525f164f0c2e9f4b8775c346bde6001cdd99fe2e51c2663152bac9d0fe57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23295</id>
    <title>Moderate: podman security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:57:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23295" id="RHSA-2025:23295" type="rhsa" title="RHSA-2025:23295"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23295.html" id="ALSA-2025:23295" type="self" title="ALSA-2025:23295"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="podman-tests" version="5.6.0" release="8.el10_1" epoch="7" arch="x86_64" src="podman-5.6.0-8.el10_1.src.rpm">
          <filename>podman-tests-5.6.0-8.el10_1.x86_64.rpm</filename>
          <sum type="sha256">b61b2c58be762c4ccfbba89be05080e8e7a7e661d5573dc63f07297a1866a5be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23940</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-23 05:59:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23940" id="RHSA-2025:23940" type="rhsa" title="RHSA-2025:23940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23940.html" id="ALSA-2025:23940" type="self" title="ALSA-2025:23940"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="python3-test" version="3.12.12" release="1.el10_1" epoch="0" arch="x86_64" src="python3.12-3.12.12-1.el10_1.src.rpm">
          <filename>python3-test-3.12.12-1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">7f786f6d3ac40a5bf73ce089eac4b971da77e5a29571f1b8de8de2eac7a1d332</sum>
        </package>
        <package name="python3-debug" version="3.12.12" release="1.el10_1" epoch="0" arch="x86_64" src="python3.12-3.12.12-1.el10_1.src.rpm">
          <filename>python3-debug-3.12.12-1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">95aef687bcf601dd7e9e0a55ed47d624b1212ca0dccbfa0e5e44d078b8380f2d</sum>
        </package>
        <package name="python3-idle" version="3.12.12" release="1.el10_1" epoch="0" arch="x86_64" src="python3.12-3.12.12-1.el10_1.src.rpm">
          <filename>python3-idle-3.12.12-1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">caa0ffecb52209604ad8cc674a418f8cf9df81abd7144e5be407503cf6fa8c38</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0128</id>
    <title>Moderate: poppler security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:29:21"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0128" id="RHSA-2026:0128" type="rhsa" title="RHSA-2026:0128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32365" id="CVE-2025-32365" type="cve" title="CVE-2025-32365"/>
      <reference href="https://bugzilla.redhat.com/2357656" id="2357656" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0128.html" id="ALSA-2026:0128" type="self" title="ALSA-2026:0128"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="poppler-qt6-devel" version="24.02.0" release="7.el10_1" epoch="0" arch="x86_64" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-qt6-devel-24.02.0-7.el10_1.x86_64.rpm</filename>
          <sum type="sha256">3ce802f16bd1ad0f980ef72fb67a83b39fec2d1984a12cff252b911af6c54fdd</sum>
        </package>
        <package name="poppler-devel" version="24.02.0" release="7.el10_1" epoch="0" arch="x86_64" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-devel-24.02.0-7.el10_1.x86_64.rpm</filename>
          <sum type="sha256">51829d9a7efddc483b4f4959b720bced40a177d38ac030e74b2470b18337885f</sum>
        </package>
        <package name="poppler-glib-doc" version="24.02.0" release="7.el10_1" epoch="0" arch="noarch" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-glib-doc-24.02.0-7.el10_1.noarch.rpm</filename>
          <sum type="sha256">94cfb72d303bddf260881ca767e64ff91af5fbb197dc31d7b0289d77cdb12fbc</sum>
        </package>
        <package name="poppler-glib-devel" version="24.02.0" release="7.el10_1" epoch="0" arch="x86_64" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-glib-devel-24.02.0-7.el10_1.x86_64.rpm</filename>
          <sum type="sha256">a67ac36a2b4a3f87afcff5aa4e77094208c02671cc9d08c472246a817b4eedbf</sum>
        </package>
        <package name="poppler-cpp-devel" version="24.02.0" release="7.el10_1" epoch="0" arch="x86_64" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-cpp-devel-24.02.0-7.el10_1.x86_64.rpm</filename>
          <sum type="sha256">b3e04a9956970bbf38a515950a45c762c4bc46a5c0d6cd7171088d5398bc5b01</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0423</id>
    <title>Important: libsoup3 security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:49:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins) (CVE-2025-14523)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0423" id="RHSA-2026:0423" type="rhsa" title="RHSA-2026:0423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14523" id="CVE-2025-14523" type="cve" title="CVE-2025-14523"/>
      <reference href="https://bugzilla.redhat.com/2421349" id="2421349" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0423.html" id="ALSA-2026:0423" type="self" title="ALSA-2026:0423"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="libsoup3-doc" version="3.6.5" release="3.el10_1.8" epoch="0" arch="noarch" src="libsoup3-3.6.5-3.el10_1.8.src.rpm">
          <filename>libsoup3-doc-3.6.5-3.el10_1.8.noarch.rpm</filename>
          <sum type="sha256">8ed97c9a1a703661eb82c105face921f622fc4708b0498230b898951295899e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0453</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:26:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)
  * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840)
  * kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843)
  * kernel: net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CVE-2025-39905)
  * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)
  * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)
  * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)
  * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)
  * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0453" id="RHSA-2026:0453" type="rhsa" title="RHSA-2026:0453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39806" id="CVE-2025-39806" type="cve" title="CVE-2025-39806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39840" id="CVE-2025-39840" type="cve" title="CVE-2025-39840"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39843" id="CVE-2025-39843" type="cve" title="CVE-2025-39843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39905" id="CVE-2025-39905" type="cve" title="CVE-2025-39905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39966" id="CVE-2025-39966" type="cve" title="CVE-2025-39966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40176" id="CVE-2025-40176" type="cve" title="CVE-2025-40176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40240" id="CVE-2025-40240" type="cve" title="CVE-2025-40240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40277" id="CVE-2025-40277" type="cve" title="CVE-2025-40277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68287" id="CVE-2025-68287" type="cve" title="CVE-2025-68287"/>
      <reference href="https://bugzilla.redhat.com/2395807" id="2395807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396936" id="2396936" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396941" id="2396941" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400611" id="2400611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404107" id="2404107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414524" id="2414524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418832" id="2418832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419954" id="2419954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422788" id="2422788" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0453.html" id="ALSA-2026:0453" type="self" title="ALSA-2026:0453"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.27.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">8d837e31f156b5d4e85c53c364b960b1d71b750ae909e233e81a4209b2370676</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.27.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">d459043cb4159b7b162054c1b1595386dc8a77311babc824836c8b824c80cfcc</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.27.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">dd825488df317c110827ac8a90971f4c7b5552cb3619216fbcda57003f85f5ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0525</id>
    <title>Moderate: postgresql16 security update</title>
    <issued date="2026-01-13 00:00:00"/>
    <updated date="2026-01-16 15:06:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql16 security update</summary>
    <description>PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.  

Security Fix(es):  

  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0525" id="RHSA-2026:0525" type="rhsa" title="RHSA-2026:0525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414825" id="2414825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0525.html" id="ALSA-2026:0525" type="self" title="ALSA-2026:0525"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="postgresql-test-rpm-macros" version="16.11" release="1.el10_1" epoch="0" arch="noarch" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-test-rpm-macros-16.11-1.el10_1.noarch.rpm</filename>
          <sum type="sha256">91d5ad13424ef2d2c5fdc1a5bad93edce3ef8e72ecff6128a255f9322c45da6e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0545</id>
    <title>Important: podman security update</title>
    <issued date="2026-01-14 00:00:00"/>
    <updated date="2026-01-16 15:04:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0545" id="RHSA-2026:0545" type="rhsa" title="RHSA-2026:0545"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47913" id="CVE-2025-47913" type="cve" title="CVE-2025-47913"/>
      <reference href="https://bugzilla.redhat.com/2414943" id="2414943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0545.html" id="ALSA-2026:0545" type="self" title="ALSA-2026:0545"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="podman-tests" version="5.6.0" release="11.el10_1" epoch="7" arch="x86_64" src="podman-5.6.0-11.el10_1.src.rpm">
          <filename>podman-tests-5.6.0-11.el10_1.x86_64.rpm</filename>
          <sum type="sha256">44681d1a134730af6d39e030adcf2b212bec021c11331c7ee11c32089cb334d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0786</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-23 07:51:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0786" id="RHSA-2026:0786" type="rhsa" title="RHSA-2026:0786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68285" id="CVE-2025-68285" type="cve" title="CVE-2025-68285"/>
      <reference href="https://bugzilla.redhat.com/2422801" id="2422801" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0786.html" id="ALSA-2026:0786" type="self" title="ALSA-2026:0786"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.28.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">20c12eb939c9405a86456bc0fe7aeb2f19ba5bb3115f8c038b9461d0a3f224d9</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.28.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">7a0f6404308eb54fd555d11c317b5bc4e60d87c2347ad5da0b7e9da961096d28</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.28.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">96f74b8ee23e57bcb578237c7bfe19cfcc9ae4b8bc91715d9a04acdfd9bc30ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0928</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-23 23:37:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0928" id="RHSA-2026:0928" type="rhsa" title="RHSA-2026:0928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0928.html" id="ALSA-2026:0928" type="self" title="ALSA-2026:0928"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">0028e7e4ebb035eb7e223d4b21694d6e46c0fe866243671d3f6376a09104a52b</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">045234af9ad0aeb32a0f14b667e283346123f89268f5254aa1f65c571e62286b</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">17fcdf43c4d6a4470d37d0b21d5fca40e8b8a7f940ac91ef77f3bbfeffbee650</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">1eac9fa3eda8bb407d81ef81c3ff9c562d16ccec9d0dac9c2eba075aec3c81c1</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">438996de4b1f1e847451dfed1055b240b98a7001eb32c3ad09e439fadb087446</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">4ebf6e39b5c95e388051108de8636211dc7c94b91ab7a185acbd914140aa965b</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">518e70daa9bb51e51c0169394c3cf5aa9200cf93858b1dfe4a52e82c275bc46a</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">6e6cbe446f39f687705eb310ba4fb2159461ea69ccb97c8320cf32792bf0f32e</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">8f887ce4aa512ba5b168e369f8c6c7d2aca12a32a6e64ff43ebbbed6efbcd79b</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">a1684863f989a634f53c7f69fb3cd19772f06bd92a81935e1e776d6a65bd18f1</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">cc54e0c22788e11a8f031789cf9c9cb7f3b2c04d4c2c15748f9874dfff03dbb3</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">cd1d00b89b5d1d3622b8a81f43d3779a9bbc8776c93b2be075b3e451ca1564f4</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">ec784e648b18bade082b89e5a019b88c961bc8574d3ba751dab3e2c6068f6d8b</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="x86_64" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.10.0.7-1.el10.alma.1.x86_64.rpm</filename>
          <sum type="sha256">ee5ef1452aef166cd922d889823ad26eda143848a93478671f11488f2791f869</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0933</id>
    <title>Important: java-25-openjdk security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-28 14:39:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-25-openjdk security update</summary>
    <description>The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0933" id="RHSA-2026:0933" type="rhsa" title="RHSA-2026:0933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0933.html" id="ALSA-2026:0933" type="self" title="ALSA-2026:0933"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="java-25-openjdk-devel-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-devel-slowdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">07123c4229e87b52cb708eaad921811575935f2a878325b9f16dab5637a00987</sum>
        </package>
        <package name="java-25-openjdk-demo-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-demo-slowdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">13973b5f56179d4c8c5fbfc98fe833aebfa1c115b36f1d0834ea0dc1ee08a33a</sum>
        </package>
        <package name="java-25-openjdk-jmods-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-jmods-slowdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">2fc90c4dbe986f09598c787ce67f2c8c985b5dc7cf7b2e89ac2abf325638696c</sum>
        </package>
        <package name="java-25-openjdk-static-libs-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-static-libs-slowdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">472478113b6a9353dbcfd710a45358a323ffb4936c9fd773994ef75a205f3f5b</sum>
        </package>
        <package name="java-25-openjdk-static-libs-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-static-libs-fastdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">5c3938329119c4c1a58823a240165d4385f92e10760daf0461eb8b6caf42ab8a</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-fastdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">92f30fe9e6a44a1cdba7e90b7023ecf36e33a1692cc717902cfecd2bfcdc6bde</sum>
        </package>
        <package name="java-25-openjdk-headless-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-headless-fastdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">9a5fc30c5d82babd48c0a395a9f1c7b3528439f8ce38c2f6664f347447c6f72c</sum>
        </package>
        <package name="java-25-openjdk-src-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-src-fastdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">a046bfda24e578259e2615ce32b5b032b388f52b835375e003e651d3dd1ff705</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-slowdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">bf45e4e1bf86c22111f4a05c6061642df5ddd3ae9dcad06edd2e77444f6c4c69</sum>
        </package>
        <package name="java-25-openjdk-devel-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-devel-fastdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">c3b4e0dc21a732c5984cb2b51629501431d5d29425eaa723ad20e1016846dfdd</sum>
        </package>
        <package name="java-25-openjdk-jmods-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-jmods-fastdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">c9654a6f35b5e4ae178d48a8b0450232954343d5c12c182cd43b068d61b9fea1</sum>
        </package>
        <package name="java-25-openjdk-src-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-src-slowdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">c9b42c65ad0deea632a4157d3bd963e3ba1720584c6b15cae27e07352409a377</sum>
        </package>
        <package name="java-25-openjdk-demo-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-demo-fastdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">d0b6877ec5b6a283cf68873244e9b3502aa38259f3dd94471eb6e98feaaa457a</sum>
        </package>
        <package name="java-25-openjdk-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-slowdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">dcf0628bf0b738c6ba98c83f74d6c170c207c4943f6332366ed2b59c77e01143</sum>
        </package>
        <package name="java-25-openjdk-headless-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-headless-slowdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">f22481170c0a4ca77e940d80643ab985044b6bda14aee0d6d423301795ca6302</sum>
        </package>
        <package name="java-25-openjdk-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="x86_64" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-fastdebug-25.0.2.0.10-1.el10.x86_64.rpm</filename>
          <sum type="sha256">ff58fcd0d35a6d9d447e73723b0d8eafbc7ba1d9626cec6a0a3efaee2ee44d44</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0975</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-23 23:34:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0975" id="RHSA-2026:0975" type="rhsa" title="RHSA-2026:0975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13601" id="CVE-2025-13601" type="cve" title="CVE-2025-13601"/>
      <reference href="https://bugzilla.redhat.com/2416741" id="2416741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0975.html" id="ALSA-2026:0975" type="self" title="ALSA-2026:0975"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="glib2-static" version="2.80.4" release="10.el10_1.12" epoch="0" arch="x86_64" src="glib2-2.80.4-10.el10_1.12.src.rpm">
          <filename>glib2-static-2.80.4-10.el10_1.12.x86_64.rpm</filename>
          <sum type="sha256">83e6f1be2e19483b73e4918a4096c48d71ca4e7bcfbbbe83654e59094efbeeda</sum>
        </package>
        <package name="glib2-doc" version="2.80.4" release="10.el10_1.12" epoch="0" arch="x86_64" src="glib2-2.80.4-10.el10_1.12.src.rpm">
          <filename>glib2-doc-2.80.4-10.el10_1.12.x86_64.rpm</filename>
          <sum type="sha256">c92460ec32fc683fddf606455130d3aed0607422357d1b0f983daeb7275f6af1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1178</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-02-02 11:35:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service due to data race in vmalloc's show_numa_info function (CVE-2025-38383)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1178" id="RHSA-2026:1178" type="rhsa" title="RHSA-2026:1178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38383" id="CVE-2025-38383" type="cve" title="CVE-2025-38383"/>
      <reference href="https://bugzilla.redhat.com/2383425" id="2383425" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1178.html" id="ALSA-2026:1178" type="self" title="ALSA-2026:1178"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.29.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">017aa43b1c49dd4b69db88121cfab8eb4f7fa9324a2640edfdec2b2a8f0375b5</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.29.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">942c815f8942d6a549757ae96770a4bdd7a138f81fb56e7b03a2f69bc75a07aa</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.29.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">bb586776570259eae8514719ca3fd63cf0317ac09c70fa196d156a5a306783f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1334</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:28:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Integer overflow in memalign leads to heap corruption (CVE-2026-0861)
  * glibc: glibc: Information disclosure via zero-valued network query (CVE-2026-0915)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1334" id="RHSA-2026:1334" type="rhsa" title="RHSA-2026:1334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0861" id="CVE-2026-0861" type="cve" title="CVE-2026-0861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0915" id="CVE-2026-0915" type="cve" title="CVE-2026-0915"/>
      <reference href="https://bugzilla.redhat.com/2429771" id="2429771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430201" id="2430201" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1334.html" id="ALSA-2026:1334" type="self" title="ALSA-2026:1334"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="glibc-benchtests" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="x86_64" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>glibc-benchtests-2.39-58.el10_1.7.alma.1.x86_64.rpm</filename>
          <sum type="sha256">0c673904dfc44f1cf32a3119a63e2f344c1a8b243b42232a5d6550f5ecf56f06</sum>
        </package>
        <package name="nss_hesiod" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="x86_64" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>nss_hesiod-2.39-58.el10_1.7.alma.1.x86_64.rpm</filename>
          <sum type="sha256">1e96d1b66b4d199f6a7dbf8e962c28089914d2e13cf4cd0d595ea511ef9da6b9</sum>
        </package>
        <package name="glibc-static" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="x86_64" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>glibc-static-2.39-58.el10_1.7.alma.1.x86_64.rpm</filename>
          <sum type="sha256">43b2f855977b946a16083a212502d2e3b2fcad74bfd115df745c66f3144c6b87</sum>
        </package>
        <package name="glibc-nss-devel" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="x86_64" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>glibc-nss-devel-2.39-58.el10_1.7.alma.1.x86_64.rpm</filename>
          <sum type="sha256">7c05ba790e7f30813fb2196126c6a655c448975455cb0bc7f316720ed82acefb</sum>
        </package>
        <package name="nss_db" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="x86_64" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>nss_db-2.39-58.el10_1.7.alma.1.x86_64.rpm</filename>
          <sum type="sha256">cf25b1703f538186b43e6c666f84bc7f6812ff38979dd944d4dcf5a5a4273a0f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1690</id>
    <title>Important: kernel security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-05 09:56:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819)
  * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022)
  * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349)
  * kernel: io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (CVE-2025-38453)
  * kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568)
  * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731)
  * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)
  * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)
  * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)
  * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)
  * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)
  * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258)
  * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251)
  * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271)
  * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294)
  * kernel: Linux kernel: Information disclosure and denial of service in Bluetooth HCI event handling (CVE-2025-40301)
  * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318)
  * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)
  * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1690" id="RHSA-2026:1690" type="rhsa" title="RHSA-2026:1690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37819" id="CVE-2025-37819" type="cve" title="CVE-2025-37819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38022" id="CVE-2025-38022" type="cve" title="CVE-2025-38022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38349" id="CVE-2025-38349" type="cve" title="CVE-2025-38349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38453" id="CVE-2025-38453" type="cve" title="CVE-2025-38453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38568" id="CVE-2025-38568" type="cve" title="CVE-2025-38568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38731" id="CVE-2025-38731" type="cve" title="CVE-2025-38731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40135" id="CVE-2025-40135" type="cve" title="CVE-2025-40135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40154" id="CVE-2025-40154" type="cve" title="CVE-2025-40154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40158" id="CVE-2025-40158" type="cve" title="CVE-2025-40158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40170" id="CVE-2025-40170" type="cve" title="CVE-2025-40170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40248" id="CVE-2025-40248" type="cve" title="CVE-2025-40248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40251" id="CVE-2025-40251" type="cve" title="CVE-2025-40251"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40258" id="CVE-2025-40258" type="cve" title="CVE-2025-40258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40271" id="CVE-2025-40271" type="cve" title="CVE-2025-40271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40294" id="CVE-2025-40294" type="cve" title="CVE-2025-40294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40301" id="CVE-2025-40301" type="cve" title="CVE-2025-40301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40318" id="CVE-2025-40318" type="cve" title="CVE-2025-40318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68301" id="CVE-2025-68301" type="cve" title="CVE-2025-68301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68305" id="CVE-2025-68305" type="cve" title="CVE-2025-68305"/>
      <reference href="https://bugzilla.redhat.com/2365032" id="2365032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373326" id="2373326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2381870" id="2381870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383516" id="2383516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389507" id="2389507" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393488" id="2393488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414494" id="2414494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414506" id="2414506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414521" id="2414521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414523" id="2414523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418872" id="2418872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418876" id="2418876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418892" id="2418892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419837" id="2419837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419891" id="2419891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419896" id="2419896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419920" id="2419920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422836" id="2422836" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422840" id="2422840" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1690.html" id="ALSA-2026:1690" type="self" title="ALSA-2026:1690"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.31.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.31.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.31.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">d70c39e183043462b0a82954a66146e09a9cb7a2a645e4158c3fca1ae79044d4</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.31.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.31.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.31.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">e0b36f3a25f437a9bdddc23c8ea8e64475e2d37d8ebbab91d6f14f93d499fa14</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.31.1.el10_1" epoch="0" arch="x86_64" src="kernel-6.12.0-124.31.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.31.1.el10_1.x86_64.rpm</filename>
          <sum type="sha256">fd0b2061e573bb94f11d1ae8dfd0b8342d871ede175d74e9af7c2ff15c46e663</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1696</id>
    <title>Moderate: util-linux security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-03 11:05:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>util-linux security update</summary>
    <description>The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.  

Security Fix(es):  

  * util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1696" id="RHSA-2026:1696" type="rhsa" title="RHSA-2026:1696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14104" id="CVE-2025-14104" type="cve" title="CVE-2025-14104"/>
      <reference href="https://bugzilla.redhat.com/2419369" id="2419369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1696.html" id="ALSA-2026:1696" type="self" title="ALSA-2026:1696"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="libfdisk-devel" version="2.40.2" release="15.el10_1" epoch="0" arch="x86_64" src="util-linux-2.40.2-15.el10_1.src.rpm">
          <filename>libfdisk-devel-2.40.2-15.el10_1.x86_64.rpm</filename>
          <sum type="sha256">41a8c61483ceb369dcd6dd017346b6d0df30375caa98ba461ecdce2cccaf7dd8</sum>
        </package>
        <package name="libsmartcols-devel" version="2.40.2" release="15.el10_1" epoch="0" arch="x86_64" src="util-linux-2.40.2-15.el10_1.src.rpm">
          <filename>libsmartcols-devel-2.40.2-15.el10_1.x86_64.rpm</filename>
          <sum type="sha256">eaa4eda576a041aab3103c7ed7c7ec5a46eaaffb1e82fc630d862cea35237a68</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1714</id>
    <title>Moderate: wireshark security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-03 11:02:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.  

Security Fix(es):  

  * Wireshark: NULL Pointer Dereference in Wireshark (CVE-2025-9817)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1714" id="RHSA-2026:1714" type="rhsa" title="RHSA-2026:1714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9817" id="CVE-2025-9817" type="cve" title="CVE-2025-9817"/>
      <reference href="https://bugzilla.redhat.com/2392839" id="2392839" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1714.html" id="ALSA-2026:1714" type="self" title="ALSA-2026:1714"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="wireshark-devel" version="4.4.2" release="4.el10_1.2" epoch="1" arch="x86_64" src="wireshark-4.4.2-4.el10_1.2.src.rpm">
          <filename>wireshark-devel-4.4.2-4.el10_1.2.x86_64.rpm</filename>
          <sum type="sha256">267c2746fefdc4fcc73e1516b8d7ad7165183bf2ddfed5b2de136f9eb33fbb6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1828</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-02-03 00:00:00"/>
    <updated date="2026-02-05 09:48:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1828" id="RHSA-2026:1828" type="rhsa" title="RHSA-2026:1828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1828.html" id="ALSA-2026:1828" type="self" title="ALSA-2026:1828"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="python3-idle" version="3.12.12" release="3.el10_1" epoch="0" arch="x86_64" src="python3.12-3.12.12-3.el10_1.src.rpm">
          <filename>python3-idle-3.12.12-3.el10_1.x86_64.rpm</filename>
          <sum type="sha256">420bdcbf6f881ec793f2d2f410e81e64ce49d4a26c69c5069f18d945871852c8</sum>
        </package>
        <package name="python3-debug" version="3.12.12" release="3.el10_1" epoch="0" arch="x86_64" src="python3.12-3.12.12-3.el10_1.src.rpm">
          <filename>python3-debug-3.12.12-3.el10_1.x86_64.rpm</filename>
          <sum type="sha256">77d5b8362898c8725a0c76c0304984cb7346436e4689c4e55255302f6ffcb6f2</sum>
        </package>
        <package name="python3-test" version="3.12.12" release="3.el10_1" epoch="0" arch="x86_64" src="python3.12-3.12.12-3.el10_1.src.rpm">
          <filename>python3-test-3.12.12-3.el10_1.x86_64.rpm</filename>
          <sum type="sha256">d4f7a40167fc329899b16a1e2d60ff2b6ff096b390ca5d4e1549089ad4317664</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1902</id>
    <title>Important: python-wheel security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-05 09:52:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-wheel security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking (CVE-2026-24049)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1902" id="RHSA-2026:1902" type="rhsa" title="RHSA-2026:1902"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24049" id="CVE-2026-24049" type="cve" title="CVE-2026-24049"/>
      <reference href="https://bugzilla.redhat.com/2431959" id="2431959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1902.html" id="ALSA-2026:1902" type="self" title="ALSA-2026:1902"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="python3-wheel" version="0.41.2" release="5.el10_1.1" epoch="1" arch="noarch" src="python-wheel-0.41.2-5.el10_1.1.src.rpm">
          <filename>python3-wheel-0.41.2-5.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">526834e9f1485bd54d081d53739d5af8b9041cb043cbac4c4a48f5dc15693afd</sum>
        </package>
        <package name="python3-wheel-wheel" version="0.41.2" release="5.el10_1.1" epoch="1" arch="noarch" src="python-wheel-0.41.2-5.el10_1.1.src.rpm">
          <filename>python3-wheel-wheel-0.41.2-5.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">d4a990e9084a15b4ecd6fe1cc0ad10bf653891914d36b6941dd44c2950e729ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2182</id>
    <title>Important: libsoup3 security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-06 17:31:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication (CVE-2026-0719)
  * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response (CVE-2026-1761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2182" id="RHSA-2026:2182" type="rhsa" title="RHSA-2026:2182"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0719" id="CVE-2026-0719" type="cve" title="CVE-2026-0719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1761" id="CVE-2026-1761" type="cve" title="CVE-2026-1761"/>
      <reference href="https://bugzilla.redhat.com/2427906" id="2427906" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2435961" id="2435961" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-2182.html" id="ALSA-2026:2182" type="self" title="ALSA-2026:2182"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-x86_64-crb-rpms__10_0_default">
        <name>almalinux-10-for-x86_64-crb-rpms__10_0_default</name>
        <package name="libsoup3-doc" version="3.6.5" release="3.el10_1.9" epoch="0" arch="noarch" src="libsoup3-3.6.5-3.el10_1.9.src.rpm">
          <filename>libsoup3-doc-3.6.5-3.el10_1.9.noarch.rpm</filename>
          <sum type="sha256">c5a13ea7b87529168e6633802580187fdcd2de43917221fbc25a1aa3721b520d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>