<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13916</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-05-06 00:00:00"/>
    <updated date="2026-05-06 15:27:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)
  * pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13916" id="RHSA-2026:13916" type="rhsa" title="RHSA-2026:13916"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-30922" id="CVE-2026-30922" type="cve" title="CVE-2026-30922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32597" id="CVE-2026-32597" type="cve" title="CVE-2026-32597"/>
      <reference href="https://bugzilla.redhat.com/2447194" id="2447194" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448553" id="2448553" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-13916.html" id="ALSA-2026:13916" type="self" title="ALSA-2026:13916"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-devel-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-devel-rpms__10_0_default</name>
        <package name="fence-agents-nutanix-ahv" version="4.16.0" release="13.el10_1.4" epoch="0" arch="noarch" src="fence-agents-4.16.0-13.el10_1.4.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.16.0-13.el10_1.4.noarch.rpm</filename>
          <sum type="sha256">1bb21e363c275364c5569b7c6ab8587207b8c3d19c8a54beebef3fe9f16ebfe9</sum>
        </package>
        <package name="fence-agents-lpar" version="4.16.0" release="13.el10_1.4" epoch="0" arch="noarch" src="fence-agents-4.16.0-13.el10_1.4.src.rpm">
          <filename>fence-agents-lpar-4.16.0-13.el10_1.4.noarch.rpm</filename>
          <sum type="sha256">a8fbaee61f5ddaf0cf9bffcc118db4826a5a05bc25b785eb579b59dcf34ee783</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1905</id>
    <title>Important: fence-agents security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-10 08:19:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fence-agents security update</summary>
    <description>The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.   

Security Fix(es):  

  * pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1905" id="RHSA-2026:1905" type="rhsa" title="RHSA-2026:1905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23490" id="CVE-2026-23490" type="cve" title="CVE-2026-23490"/>
      <reference href="https://bugzilla.redhat.com/2430472" id="2430472" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1905.html" id="ALSA-2026:1905" type="self" title="ALSA-2026:1905"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-devel-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-devel-rpms__10_0_default</name>
        <package name="fence-agents-nutanix-ahv" version="4.16.0" release="13.el10_1.2" epoch="0" arch="noarch" src="fence-agents-4.16.0-13.el10_1.2.src.rpm">
          <filename>fence-agents-nutanix-ahv-4.16.0-13.el10_1.2.noarch.rpm</filename>
          <sum type="sha256">1140a0126790eadfec370897887672c9d16efc30a74b7d56bbcf575a28c6849e</sum>
        </package>
        <package name="fence-agents-lpar" version="4.16.0" release="13.el10_1.2" epoch="0" arch="noarch" src="fence-agents-4.16.0-13.el10_1.2.src.rpm">
          <filename>fence-agents-lpar-4.16.0-13.el10_1.2.noarch.rpm</filename>
          <sum type="sha256">c14f47ca04e62c592419b32c0df598be7c63242ccc82effa09c1fcc73d8983df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4649</id>
    <title>Moderate: grub2 security update</title>
    <issued date="2026-03-16 00:00:00"/>
    <updated date="2026-03-19 15:01:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>grub2 security update</summary>
    <description>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.  

Security Fix(es):  

  * grub2: Missing unregister call for gettext command may lead to use-after-free (CVE-2025-61662)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4649" id="RHSA-2026:4649" type="rhsa" title="RHSA-2026:4649"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61662" id="CVE-2025-61662" type="cve" title="CVE-2025-61662"/>
      <reference href="https://bugzilla.redhat.com/2414683" id="2414683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4649.html" id="ALSA-2026:4649" type="self" title="ALSA-2026:4649"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-devel-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-devel-rpms__10_0_default</name>
        <package name="grub2-ppc64le-modules" version="2.12" release="29.el10_1.2.alma.1" epoch="1" arch="noarch" src="grub2-2.12-29.el10_1.2.alma.1.src.rpm">
          <filename>grub2-ppc64le-modules-2.12-29.el10_1.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">7fb74d1d103ac7dea7046f6dac6dc7a7832ee0d726af1b4472c9d69b5c35305c</sum>
        </package>
        <package name="grub2-pc-modules" version="2.12" release="29.el10_1.2.alma.1" epoch="1" arch="noarch" src="grub2-2.12-29.el10_1.2.alma.1.src.rpm">
          <filename>grub2-pc-modules-2.12-29.el10_1.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">d3355bd4dd743099f1ddaad918e54c33cfee355313ed56f2faca99c6da911857</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A003</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 19:17:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2460538" id="show_bug.cgi?id=2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-A003.html" id="ALSA-2026:A003" type="self" title="ALSA-2026:A003"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-devel-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-devel-rpms__10_0_default</name>
        <package name="kernel-modules-internal" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-modules-internal-6.12.0-124.52.2.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">05ccfc20dc4810e84566cd83dc1d26a73702c55fd1a71e52ed3cf7f75201489e</sum>
        </package>
        <package name="libperf-devel" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>libperf-devel-6.12.0-124.52.2.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">15caa9931dcaacda04fb3ce85c2599ef83fd6a6bd206b0cf066b2ebe52555a39</sum>
        </package>
        <package name="kernel-selftests-internal" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-selftests-internal-6.12.0-124.52.2.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">7dd410370cfde02c83a2de767c95629568d17a07a940a55d54e958c15222c95c</sum>
        </package>
        <package name="kernel-debug-modules-partner" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-debug-modules-partner-6.12.0-124.52.2.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">86cc83ad030eae8d00a25a5c40da948ddba578f1d4b6ea170f74394557cd4a95</sum>
        </package>
        <package name="kernel-modules-partner" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-modules-partner-6.12.0-124.52.2.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">8844e7a886aaee3c8ed2333489d9a4797a199647bdd26d433164f70c5b589c08</sum>
        </package>
        <package name="kernel-debug-modules-internal" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-debug-modules-internal-6.12.0-124.52.2.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">e00e7155a71700c2b99d0d0ebf5d2e0eee0d7bff434782be7558b979c084e431</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>